Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
File: tdM6ejKlCC0za2sFt5ZfMHRwonY.cer (raw, json)
Hash identifier: 7Bk5ScT6PQeQIvKlQ3JXw6fc25wW2P1joqObG9lCuWE=
Subject key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02E5F1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
CRL Distribution Point: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Manifest: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 09 Nov 2026 14:11:27 +0000
Certificate not after: Mon 31 Jan 2028 00:00:00 +0000
Subordinate resources: AS: 132446
IP: 43.241.252.0/22
IP: 103.21.208.0/22
IP: 2401:7180::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 17:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189937 (0x2e5f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 9 14:11:27 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:08:9c:41:cf:ac:c6:30:28:8a:dc:22:1e:63:
be:8f:3b:bd:de:14:c7:48:b5:17:71:26:d3:c3:a6:
cb:bc:f0:6a:9f:2b:f3:18:46:9c:ba:53:76:e5:9b:
9b:6c:bf:40:ed:06:52:08:9f:2c:c0:ad:ea:8a:7c:
be:5b:96:a2:cf:4e:9c:5c:2e:38:6a:1b:b0:1c:ba:
a4:19:90:54:ce:23:d6:52:2b:b1:0f:c8:7c:e5:dc:
05:63:31:d0:79:f4:6c:49:34:96:08:de:82:9d:d1:
3f:61:bf:60:9e:76:41:cb:d1:3d:ea:e8:41:01:2c:
80:4c:15:49:20:8e:88:69:21:9a:15:9a:1c:76:b2:
b4:6e:27:a7:10:a4:c0:f2:fd:3a:52:d6:b6:0b:9b:
6d:db:d4:69:b0:85:74:8b:ab:ab:a6:29:f5:81:4a:
26:8b:b3:43:cd:94:11:f2:e1:ab:2f:83:a7:7a:96:
b8:65:f2:c9:8e:1e:b4:5e:a6:af:e0:cf:48:8e:9e:
1e:7b:aa:6a:a6:75:9f:7c:bc:4b:92:b1:0b:24:cf:
b2:34:85:cd:fb:b8:c9:23:72:26:1e:ee:73:0e:da:
81:70:3b:b8:94:e4:fe:c1:05:fd:28:f6:2b:57:bb:
6f:92:a6:8a:28:29:89:bc:9d:b6:b7:b5:24:00:3a:
d7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132446
sbgp-ipAddrBlock: critical
IPv4:
43.241.252.0/22
103.21.208.0/22
IPv6:
2401:7180::/32
Signature Algorithm: sha256WithRSAEncryption
2b:56:68:7d:2c:ab:ea:cc:89:f0:3f:63:af:8b:89:f6:33:6d:
e5:7f:91:bd:39:93:c0:92:76:f7:c6:46:d7:4c:31:87:74:ed:
36:a5:39:d4:e7:5e:ae:99:68:4c:7e:87:13:c6:1d:89:14:1b:
a1:22:36:16:df:ab:64:0b:71:6b:6d:e5:24:7f:cf:c3:18:45:
c6:c0:e9:fa:c4:60:0f:b5:9c:29:c1:47:d2:e2:3a:a6:2a:a8:
24:40:d8:8f:ab:af:92:b6:ee:b1:79:4c:e1:98:d9:51:ef:20:
53:29:3e:bd:b3:b7:dd:9e:4e:15:f1:19:ea:12:6d:49:4c:5f:
aa:8e:7f:fc:47:3d:f3:84:8c:94:d7:f4:51:5f:f5:5d:40:cc:
0d:fa:a2:5f:46:c4:88:64:2c:71:12:53:1b:1f:8a:14:77:08:
43:cf:64:21:c2:be:bb:fb:6f:8a:aa:2f:bb:58:64:3a:ee:6c:
1d:c8:5c:d7:92:fe:7a:18:3e:e3:84:a9:94:c7:88:25:df:11:
c5:ca:02:3e:84:c4:4e:10:2c:69:b6:ab:86:95:0f:5b:a6:60:
81:58:90:ad:d4:02:76:1f:e5:24:3e:6a:a2:c1:a6:ba:c8:e7:
f2:aa:60:aa:5d:d3:1b:ab:fc:17:4b:66:35:fb:d7:52:51:fc:
7b:92:60:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:40:47 2026 by rpki-client