Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer
File: r7qhUW6eF_JM-RRbjHzUuoGlekA.cer (raw, json)
Hash identifier: oiGIxezy56SGG5dHHU+a6LYHz0jAvXLXdoZGMGvb+ec=
Subject key identifier: AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A63F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 25 Mar 2026 07:09:07 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 140622
IP: 103.182.173.0/24
IP: 2001:df0:7e40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 06:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173631 (0x2a63f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 25 07:09:07 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91568A0, serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4f:d2:ac:06:ec:1a:ed:8f:7d:f9:16:a7:01:
81:11:a7:b2:df:52:c4:81:9c:9e:77:aa:79:2b:f8:
c8:b2:8a:00:ee:a0:12:f4:91:50:48:77:c0:c2:93:
81:b3:f7:aa:ea:b6:27:ae:a6:19:c6:a1:3d:d2:9e:
d0:3b:a3:d6:19:a0:3c:a3:3f:ae:33:c9:a6:73:8a:
3f:6d:da:a8:60:0c:37:89:5c:31:5e:8c:bc:cb:1c:
7b:2b:7b:fb:e5:d9:a0:63:22:3b:6e:15:19:3e:9e:
d6:23:41:10:f7:1d:00:9b:5b:6c:a5:bd:bf:c4:ca:
02:3c:b9:11:a1:56:77:47:f9:e8:35:25:b1:01:f7:
c3:81:da:7c:56:7b:e4:5d:9c:47:4e:23:18:04:09:
3b:a1:51:88:28:76:ae:26:98:aa:67:b6:12:ae:1e:
69:fa:3e:fc:da:c9:a0:60:f9:ec:e7:3d:70:df:0d:
ec:ad:18:fd:84:17:03:8a:67:57:42:f4:3f:db:1c:
ae:22:83:fe:51:60:e2:20:03:7d:e7:c3:71:9e:d5:
fa:bf:83:9f:e5:a6:03:83:aa:74:e7:90:92:77:f0:
c4:d1:fb:3e:09:de:10:05:87:bf:80:25:c3:f9:5b:
c3:92:15:8f:dc:a5:de:ed:9f:e7:92:f1:5f:75:8e:
63:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140622
sbgp-ipAddrBlock: critical
IPv4:
103.182.173.0/24
IPv6:
2001:df0:7e40::/48
Signature Algorithm: sha256WithRSAEncryption
1a:1b:19:41:fa:d2:f5:2c:d4:d4:3b:df:f8:7d:79:28:ef:44:
d2:d5:a8:74:30:e3:da:b9:c7:fb:11:19:6b:98:ec:9a:13:90:
e0:9d:5f:9e:66:af:43:27:d3:fb:ed:f2:96:d2:e9:5f:75:d8:
b7:ed:d1:cc:69:48:9e:ca:72:58:6d:d8:41:9a:5c:15:e7:a1:
97:9e:bb:6a:9c:ea:27:ec:ff:63:b1:ec:1b:53:93:b4:09:f1:
a0:a6:db:ab:3a:2d:7a:8a:11:92:0d:33:55:a5:d8:bc:cb:d2:
cd:60:eb:d2:19:5a:dd:ac:3e:d3:a7:b1:d6:dc:31:cc:36:50:
16:cf:66:9b:cb:1a:e4:7b:4e:09:55:c8:84:06:ac:0b:2e:fc:
b3:bb:85:6f:1e:b5:d2:8d:94:a5:68:13:03:b3:97:9f:60:2e:
1b:01:c0:c2:d4:c7:8e:82:5a:6d:f1:8a:30:7e:e1:51:c6:4d:
66:78:ae:d1:e0:4a:0d:00:f1:eb:1d:da:9b:fc:a0:43:36:9e:
e9:27:2f:36:9e:26:a5:ad:fc:b6:70:54:c9:10:ca:45:65:31:
1c:e9:97:1b:f4:f6:36:59:76:48:f5:53:12:0d:e8:71:1c:25:
d6:6e:4f:45:cd:66:74:4a:bd:20:92:7a:53:d9:80:3d:27:3e:
42:e4:8c:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:45:21 2026 by rpki-client