Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer
File: -Q4hD858Z6Lysy3hTusFoEsNEOE.cer (raw, json)
Hash identifier: JyUZ9O5B0enbIPRKjt7PCqV9tMNrfe18ZlBtfSvjB5M=
Subject key identifier: F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AD25
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 17 Apr 2026 01:40:58 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 136740
AS: 141047
IP: 103.94.252.0/22
IP: 103.155.68.0/23
IP: 2406:6940::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175397 (0x2ad25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 17 01:40:58 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91A7369, serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:a5:39:25:7c:62:96:ca:d0:dd:b2:65:bc:
da:50:15:43:02:c7:b6:c9:60:2d:a2:72:a3:97:44:
29:9c:9c:43:c5:8f:b3:e2:56:a5:84:71:06:94:cc:
34:e1:c4:54:c6:09:99:cf:13:01:6e:68:0a:78:4f:
0d:3d:54:28:ba:b7:39:96:1b:9e:3b:d7:f5:24:62:
a8:5c:f1:f8:9a:8a:f4:4f:8f:b7:f8:80:dd:b3:ff:
5e:e5:b8:ed:ce:e1:19:b5:3a:8f:d4:26:c8:e4:91:
3f:28:12:be:b1:ea:bc:a8:9d:e1:b4:fb:f1:77:13:
3b:95:34:cc:73:82:71:19:3d:97:be:06:d4:63:88:
18:0d:a2:bc:c6:81:f0:2b:db:ae:6e:43:89:a4:17:
1e:6b:8c:03:a7:74:5e:75:85:d2:8a:ec:4f:e9:b2:
76:1e:ff:e4:c8:d0:30:54:33:a7:89:36:26:90:9a:
5b:57:8e:19:4d:fc:ff:a6:8b:d2:0b:4a:ef:fa:21:
64:3a:20:54:e5:31:5f:c5:4f:07:f0:dd:97:bf:d1:
1d:fa:0d:7c:cf:92:1c:dc:7e:a2:6b:66:92:25:d8:
81:f9:0d:af:23:ce:be:0b:5a:41:bc:90:cd:8d:df:
51:8a:a6:07:68:3e:74:65:70:83:fd:55:48:63:5f:
27:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136740
141047
sbgp-ipAddrBlock: critical
IPv4:
103.94.252.0/22
103.155.68.0/23
IPv6:
2406:6940::/32
Signature Algorithm: sha256WithRSAEncryption
32:dc:3b:e5:6e:07:7f:f4:65:21:d9:e9:28:2b:38:ae:b9:9d:
b1:bc:62:16:41:52:ff:2d:3d:d4:7d:c4:48:30:11:aa:6b:3c:
2e:7b:3e:46:9e:85:9d:2d:90:79:3a:b7:7a:b7:49:85:50:27:
3a:c0:71:60:7a:56:c2:56:9d:67:6e:17:5a:6e:00:41:6e:8b:
19:82:80:4d:db:b8:3a:7f:dd:b9:9b:52:a4:95:09:11:08:04:
48:94:ca:1e:18:06:12:db:ad:d2:8f:87:07:c6:76:96:4f:02:
3d:a1:90:3f:5c:56:dd:0f:c0:1e:33:93:68:f7:7e:6f:3a:25:
3d:2b:d0:6e:9e:88:60:cb:97:2d:ef:13:1a:c6:a7:b3:a8:58:
46:5a:c7:77:11:9a:80:b2:48:f2:c3:66:99:46:2d:73:fa:d6:
37:ba:e9:50:c6:74:dc:6f:32:b5:3d:38:dd:78:5d:97:1f:5a:
7a:0b:b2:c6:6d:20:5d:48:7c:ed:0b:8d:0c:5f:a8:b9:84:45:
74:7e:43:72:9f:c1:90:48:fd:f1:aa:ac:eb:95:a2:66:53:3d:
5f:12:49:8b:25:43:50:6b:3e:13:52:87:c0:5f:8f:01:83:6a:
be:09:0e:ee:b7:15:73:e8:0f:f1:10:c5:23:1d:41:27:57:cd:
58:1f:f7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:58 2026 by rpki-client