Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer
File: v-RhN13CI9T3snBV4rNHRf5hAdQ.cer (raw, json)
Hash identifier: pSpdqTbjoGg3Ih7iYnba8cBV49vTWEDQ/SnZ1R0oP8Y=
Subject key identifier: BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A455
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 14 Mar 2026 14:10:28 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 134506
IP: 103.161.106.0/23
IP: 2001:df5:c180::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173141 (0x2a455)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 14 14:10:28 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91CD98D, serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e4:8f:58:ff:f7:54:67:b1:ea:b0:b9:46:eb:
3d:64:c8:50:f9:ce:5b:78:8a:ec:91:f7:99:2f:19:
b5:9f:79:4f:e2:b7:f0:80:45:37:47:ed:a1:fc:44:
b5:9f:09:df:02:b6:03:ff:52:c8:7f:be:69:36:32:
33:59:c3:c1:50:49:b7:41:f0:34:18:63:85:ac:5e:
23:91:e7:65:c1:a7:1e:65:fe:a1:76:3f:bf:ef:af:
d3:4f:75:9b:59:e5:f3:9c:c0:88:fd:ca:2c:67:09:
5e:4d:01:b4:fb:0a:22:bb:0f:b2:58:08:75:66:b3:
fd:7f:ab:09:30:8d:5a:ff:08:09:15:cd:c3:03:fd:
58:b0:0d:44:ad:02:c4:a8:78:9b:15:61:48:5e:da:
20:92:90:6c:c9:7c:6a:bd:6e:51:cf:96:e5:85:b5:
bb:25:35:2a:75:0c:da:bd:6b:b5:e2:e8:e7:eb:11:
74:1b:4b:1d:c0:13:5a:40:5c:4b:2d:21:1e:cc:fb:
82:6d:9c:87:72:c6:79:6c:96:45:96:14:e9:cf:5b:
7e:07:41:52:56:39:ad:36:80:7d:e9:ad:25:cf:98:
be:6d:74:e0:5a:d8:5e:5f:89:13:9f:e8:52:36:a1:
70:ca:84:76:a8:d2:f4:12:9a:df:21:cb:04:32:04:
5e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134506
sbgp-ipAddrBlock: critical
IPv4:
103.161.106.0/23
IPv6:
2001:df5:c180::/48
Signature Algorithm: sha256WithRSAEncryption
77:00:a4:cd:e4:6d:e7:bf:b0:eb:86:f4:4b:58:50:59:94:0d:
a9:a9:6f:d3:9a:46:14:ab:41:0c:64:f0:f7:70:16:e7:a7:b0:
a3:61:e2:ac:f3:71:26:33:af:dc:49:78:55:02:e8:7b:31:47:
39:5a:fc:df:df:8c:03:08:eb:31:43:82:69:39:bc:17:09:9a:
b8:6d:fa:60:61:ad:48:1e:91:06:b8:96:56:07:6a:7b:79:39:
42:07:a2:05:20:82:23:79:95:aa:3c:a6:47:65:1a:97:1e:9b:
8a:ab:a2:1f:29:a4:d8:09:22:b9:17:ae:9b:02:21:a5:d8:ed:
c5:60:55:1c:2c:cc:ac:17:d9:08:5b:25:8c:26:9f:24:2e:d3:
ad:ff:e9:99:12:fc:cb:47:f1:c6:7e:f3:6e:94:50:3b:56:29:
ee:16:94:bc:62:c6:17:bf:55:95:3e:48:04:55:4f:bd:fb:d0:
85:b5:c7:e7:8f:c3:25:22:e8:ed:5c:70:50:3f:01:2b:0c:40:
02:00:fe:54:ae:2b:6a:90:2a:e3:98:da:5c:17:dc:88:38:6b:
aa:ed:4c:a7:54:e2:92:ef:ce:d0:d4:1a:f4:49:24:99:b0:c1:
ca:b1:f5:c7:70:ef:c7:f3:20:6e:6b:77:d7:28:67:be:df:11:
e6:97:3f:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:18:50 2026 by rpki-client