Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer
File: wekLXRHZAbDQSjQmCADU4p8cYqw.cer (raw, json)
Hash identifier: xjL+hZG9qHyOOELCpcKYR3ePvp0qPNq0spQNyj6v84c=
Subject key identifier: C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D3BE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 03 Sep 2026 13:50:33 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 139603
IP: 103.142.74.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185278 (0x2d3be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 3 13:50:33 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91CB3A5, serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:08:e2:33:e3:12:71:57:d9:60:6b:f3:ac:
51:ee:07:b0:14:61:b4:9c:41:1b:8b:32:db:e9:42:
ed:17:3b:24:ca:21:5e:b6:0d:9c:46:34:70:51:97:
59:12:80:23:47:52:dd:ca:82:20:7c:63:9d:19:4a:
ad:a3:b1:ef:4c:8a:ca:7d:ba:33:0d:4b:27:fa:0d:
d1:e3:33:fd:8b:41:fe:71:4f:96:74:4f:56:81:b8:
7e:b5:e7:3e:30:28:a9:2e:84:a5:ee:3d:9b:94:51:
b3:3d:1a:b2:38:dc:af:a1:48:2a:ec:6e:f3:97:59:
f3:f0:13:f9:77:99:9c:ee:e5:bf:59:7c:a2:fd:0c:
89:1e:ab:95:f7:b9:4c:76:00:e8:1f:4e:d8:a2:be:
19:9c:71:ce:28:98:43:19:61:3c:8c:ed:ea:5c:47:
f3:e4:f6:55:74:6d:2c:41:c0:f6:2c:f8:4c:94:a1:
4b:8d:f5:5f:c0:a2:c0:43:fe:03:b6:80:1a:0e:07:
da:50:1c:39:29:79:54:93:e5:3e:2a:66:cd:81:58:
0c:fb:ba:80:a0:39:3e:3b:2e:07:3b:b7:c9:2f:14:
7b:ae:12:1d:59:29:2d:79:49:8a:a6:91:19:17:f5:
ba:2f:dc:5a:eb:e7:92:22:0a:6c:0e:e3:c5:ff:9d:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139603
sbgp-ipAddrBlock: critical
IPv4:
103.142.74.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:d0:aa:76:b3:e0:96:ff:0b:6a:b7:71:38:61:80:de:71:00:
9f:45:f4:af:73:59:10:f5:41:c0:27:51:d2:40:be:3a:cd:ea:
f2:2d:d6:85:75:6f:f6:f4:d1:5e:bf:bd:ef:fb:15:a7:f0:b4:
23:2c:12:1d:47:dc:14:de:f4:79:d6:b4:a9:3a:94:ce:c4:64:
ca:92:a6:27:ca:13:88:40:fb:1c:a0:0e:6a:19:cb:dc:4a:2f:
4f:51:0e:ba:9b:f8:5c:c6:37:e5:6a:c9:0e:50:33:62:ce:ed:
6a:3b:be:c8:84:21:f2:c1:ee:94:83:34:85:d1:89:35:fc:0d:
78:19:89:f8:e9:5b:40:09:4b:b2:ba:5f:a0:90:a7:d0:5a:4d:
73:cb:55:a3:5f:bb:38:71:ca:55:f5:75:e1:28:7d:cf:42:de:
0d:93:cd:3e:8b:a9:59:37:b3:97:9b:0c:82:97:77:18:26:0e:
51:0e:1f:8d:dd:40:73:ab:e8:0c:7d:50:1a:8f:d7:1f:40:a8:
88:85:b7:c2:0e:26:02:50:07:95:47:5a:d6:a4:ab:fb:19:8f:
d9:a9:2f:fb:60:89:2e:27:2f:dc:da:46:93:b8:93:46:cb:99:
91:af:c5:ea:7e:b5:26:4f:b5:84:55:d6:31:6e:3a:eb:d7:14:
9d:b7:fb:84
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAtO+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDkwMzEzNTAzM1oXDTI3MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQ0IzQTUxMTAvBgNVBAUTKEMxRTkwQjVEMTFEOTAxQjBEMDRBMzQy
NjA4MDBENEUyOUYxQzYyQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDHQjiM+MScVfZYGvzrFHuB7AUYbScQRuLMtvpQu0XOyTKIV62DZxGNHBRl1kS
gCNHUt3KgiB8Y50ZSq2jse9Misp9ujMNSyf6DdHjM/2LQf5xT5Z0T1aBuH615z4w
KKkuhKXuPZuUUbM9GrI43K+hSCrsbvOXWfPwE/l3mZzu5b9ZfKL9DIkeq5X3uUx2
AOgfTtiivhmccc4omEMZYTyM7epcR/Pk9lV0bSxBwPYs+EyUoUuN9V/AosBD/gO2
gBoOB9pQHDkpeVST5T4qZs2BWAz7uoCgOT47Lgc7t8kvFHuuEh1ZKS15SYqmkRkX
9bov3Frr55IiCmwO48X/nRA1AgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUwekLXRHZ
AbDQSjQmCADU4p8cYqwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNCM0E1LzQ0NTk4NDM4MEM2QjExRUJCMzJEODQxOEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDQjNBNS80NDU5ODQzODBDNkIxMUVCQjMyRDg0MThDNEY5QUUwMi93ZWtMWFJI
WkFiRFFTalFtQ0FEVTRwOGNZcXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiFTMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ45KMA0GCSqG
SIb3DQEBCwUAA4IBAQCe0Kp2s+CW/wtqt3E4YYDecQCfRfSvc1kQ9UHAJ1HSQL46
zeryLdaFdW/29NFev73v+xWn8LQjLBIdR9wU3vR51rSpOpTOxGTKkqYnyhOIQPsc
oA5qGcvcSi9PUQ66m/hcxjflaskOUDNizu1qO77IhCHywe6UgzSF0Yk1/A14GYn4
6VtACUuyul+gkKfQWk1zy1WjX7s4ccpV9XXhKH3PQt4Nk80+i6lZN7OXmwyCl3cY
Jg5RDh+N3UBzq+gMfVAaj9cfQKiIhbfCDiYCUAeVR1rWpKv7GY/ZqS/7YIkuJy/c
2kaTuJNGy5mRr8XqfrUmT7WEVdYxbjrr1xSdt/uE
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:19:29 2026 by rpki-client