Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
File: s40rj01btqU-m0GSYQSBpdiBZUY.cer (raw, json)
Hash identifier: 9qRwtFhHF3X4CpxkrwcRU7AsQZKxHioLty4sUYWazv4=
Subject key identifier: B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D2C5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Sep 2026 14:36:24 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 139332
IP: 103.141.84.0/23
IP: 2001:df0:f780::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185029 (0x2d2c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 1 14:36:24 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91E12AD, serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3d:04:fe:5e:1e:ee:be:3d:6d:eb:50:a7:2d:
e9:80:e9:76:0b:a5:b9:03:b8:b8:2e:a4:45:75:6c:
2e:42:9c:2b:ba:ba:b2:44:27:c7:d6:c9:42:b0:58:
36:da:1b:47:e2:da:7b:70:c5:4f:18:61:58:50:4b:
6f:77:92:d7:1d:45:01:f8:56:0c:f8:9b:80:b7:ba:
49:2b:c2:5d:74:1e:04:a8:c8:a2:50:66:07:1d:42:
18:ae:2d:8d:cf:fc:cf:ff:11:f8:25:57:47:8d:8a:
28:0c:60:06:13:78:30:a3:06:a5:2c:e2:02:b1:97:
3c:90:27:46:4d:b6:b4:2c:b3:71:3e:e6:98:6c:90:
e2:40:b4:92:78:91:e5:ec:72:b1:02:cb:b7:87:01:
db:86:8e:d2:99:9a:ca:c1:2a:50:8f:a3:3c:1f:34:
45:38:f9:da:e1:aa:df:d9:5d:a5:d0:3a:bf:f7:a4:
e5:ea:72:d2:60:ab:fb:fc:64:64:05:e2:57:75:fa:
44:41:17:f9:82:f9:88:6e:1b:75:34:e1:ec:01:61:
b5:87:d7:8f:66:00:9b:a0:c9:d6:15:02:57:30:21:
66:78:0b:d5:29:2f:ea:1f:af:30:08:00:04:82:c7:
ee:0e:f1:0e:ae:f5:e8:93:41:54:95:ba:8c:df:96:
30:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139332
sbgp-ipAddrBlock: critical
IPv4:
103.141.84.0/23
IPv6:
2001:df0:f780::/48
Signature Algorithm: sha256WithRSAEncryption
1c:54:8e:4c:92:ee:1c:6e:37:0e:40:45:7a:3e:da:41:33:74:
08:12:cd:62:e3:5d:6d:3a:94:0f:4b:20:f7:45:85:69:35:dd:
d1:70:11:1c:d8:25:41:86:69:bb:47:80:f5:af:e9:4d:68:90:
d0:66:2f:f7:69:ec:b3:78:36:c7:0a:97:7d:89:24:6d:ab:65:
b2:aa:69:6d:9e:d0:e3:c6:cc:45:c9:f8:5d:a4:89:bf:ea:8c:
fe:21:a5:45:0e:ff:f9:7a:86:3e:ac:fa:1e:ab:e3:c8:a0:34:
23:a3:7c:8b:12:e5:c0:9e:03:1a:72:90:52:16:e2:b5:29:c0:
67:27:c9:8f:de:b3:9f:cb:e0:eb:9d:bf:44:fa:e1:64:10:32:
44:f6:5a:c9:31:a6:3a:00:6a:68:0d:b7:f7:dd:9b:9e:48:31:
49:63:7a:93:ee:49:a7:09:5d:02:1b:2e:67:7e:7e:65:d1:86:
6a:c1:88:94:4e:57:cf:e2:86:fd:f8:e5:ce:9b:82:a4:38:fb:
46:12:7a:11:7b:cc:30:52:1f:fa:6a:d6:46:a7:ea:2c:09:19:
58:44:91:aa:bf:36:4f:6a:4c:ce:f3:fd:1f:a2:db:8b:27:a8:
37:d1:aa:f8:b4:a0:84:be:94:63:61:99:ec:91:d3:38:44:28:
32:0e:09:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:31:45 2026 by rpki-client