Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
File: -Dcw_Tkbb492_vMXbtufxvVUHkA.cer (raw, json)
Hash identifier: AiWATjSpuPTFF3amKaBlxrRVQ9wHsnoqdRu3dFgurQw=
Subject key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029F2C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:09:59 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 38901
AS: 131178
AS: 137066
AS: 138429
IP: 27.96.84.0/22
IP: 43.245.32.0/22
IP: 43.252.16.0/22
IP: 45.115.80.0/22
IP: 45.115.208.0/22
IP: 45.118.76.0/22
IP: 49.156.0.0/22
IP: 58.97.192.0 -- 58.97.231.255
IP: 103.9.188.0/22
IP: 103.12.160.0/22
IP: 103.30.196.0/22
IP: 110.74.192.0/19
IP: 113.130.124.0/22
IP: 119.82.248.0/21
IP: 163.47.12.0/22
IP: 163.47.172.0/22
IP: 202.58.96.0/22
IP: 221.120.160.0/22
IP: 2400:4880::/32
IP: 2404:300::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171820 (0x29f2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:09:59 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A913621A, serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:4e:6e:f7:91:51:41:d2:12:0d:3f:95:63:
45:9e:ca:b4:0b:6a:2a:2f:99:72:98:e5:f3:42:35:
28:5e:68:2a:2b:02:55:3b:80:47:37:b6:eb:13:c2:
fc:00:8e:cd:a0:51:8a:f4:f9:e4:46:4c:27:26:04:
3a:e3:de:32:d9:d4:5a:36:d8:fe:87:84:bb:2c:de:
c9:f3:be:0d:14:ae:96:de:dc:bd:13:9d:0b:01:52:
25:6e:08:71:5c:05:65:96:8c:a3:8f:22:4e:09:91:
f7:50:93:5b:7d:02:67:e2:f1:7f:01:a5:a0:84:e5:
b1:52:e0:b2:c4:39:43:8a:a7:d2:c0:2e:d4:9e:e3:
a8:c3:ef:a5:07:6c:58:09:c2:be:92:40:f4:5c:84:
fc:f2:da:ca:17:22:83:2f:d0:ca:2f:6b:13:1f:7c:
eb:c8:c8:49:43:e1:20:1d:09:31:4a:1c:71:98:37:
e3:5d:b8:df:03:11:f3:09:bc:8d:ce:fe:29:e8:4c:
c9:38:64:73:6b:a1:6c:21:08:39:46:1b:46:19:f0:
7f:ab:c1:38:e7:0c:75:9f:67:44:c6:07:10:6c:1c:
ec:90:ed:50:c0:42:f7:79:df:d0:95:54:8d:c4:8b:
29:99:de:e9:3d:39:f1:bb:10:a9:87:30:32:dc:19:
25:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38901
131178
137066
138429
sbgp-ipAddrBlock: critical
IPv4:
27.96.84.0/22
43.245.32.0/22
43.252.16.0/22
45.115.80.0/22
45.115.208.0/22
45.118.76.0/22
49.156.0.0/22
58.97.192.0-58.97.231.255
103.9.188.0/22
103.12.160.0/22
103.30.196.0/22
110.74.192.0/19
113.130.124.0/22
119.82.248.0/21
163.47.12.0/22
163.47.172.0/22
202.58.96.0/22
221.120.160.0/22
IPv6:
2400:4880::/32
2404:300::/32
Signature Algorithm: sha256WithRSAEncryption
39:bb:90:d3:14:0a:0e:b9:4b:aa:c6:01:bc:d0:2b:82:6a:06:
37:a4:f4:ae:81:24:55:f1:13:5f:5e:fc:9c:56:cb:e1:6c:3c:
82:d3:7a:58:42:74:48:df:b6:92:f3:ec:37:a4:c7:a9:53:48:
fb:ad:17:c6:32:fe:b0:0a:33:4d:19:56:8f:ef:b0:59:55:d0:
db:e1:36:82:c3:00:ff:7b:39:2d:d0:99:1b:7d:4a:83:17:18:
2c:33:b8:8b:12:71:1b:82:8e:e6:ba:c2:67:5d:c4:e0:da:1e:
11:98:56:d6:76:29:43:f3:92:26:2b:45:ab:c4:c0:3b:b1:0c:
b5:06:ee:bc:9a:a8:30:ee:b2:a0:65:ad:21:8a:5c:65:be:ed:
ca:80:9a:cb:5e:98:f8:05:1a:5d:c2:93:2f:85:2e:e4:5a:69:
c1:8d:b3:7b:0d:92:58:6f:b8:f3:25:ab:a2:ce:6c:7b:c9:b5:
e0:42:56:f7:78:6b:82:59:30:3c:38:a1:fe:b9:af:3d:9a:11:
1a:20:22:4b:c2:b5:ba:fb:e1:09:27:35:4a:c7:50:16:b6:05:
c5:7e:3c:a2:3b:0d:30:53:dd:07:89:4f:8e:45:e5:0a:b9:32:
6c:7c:1d:91:82:f0:cd:ae:44:c6:24:cd:a4:9b:5c:52:47:3f:
dd:51:6f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:50:49 2026 by rpki-client