Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-soSQJs8JskJ3Pqy874emPzo2oA.cer
File: -soSQJs8JskJ3Pqy874emPzo2oA.cer (raw, json)
Hash identifier: nRBeXrfZe6S/C+0f5rgNxGEoh6HXyZPb0J7L3+mLub0=
Subject key identifier: FA:CA:12:40:9B:3C:26:C9:09:DC:FA:B2:F3:BE:1E:98:FC:E8:DA:80
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02ACBA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 15 Apr 2026 08:11:20 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 134366
AS: 140882
IP: 45.120.216.0/22
IP: 103.61.36.0/22
IP: 103.152.210.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175290 (0x2acba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 15 08:11:20 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91EE8EF, serialNumber=FACA12409B3C26C909DCFAB2F3BE1E98FCE8DA80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:a9:bd:5c:bb:b4:7c:5a:7a:73:73:9a:93:
bc:64:06:00:9e:a0:ca:8e:ae:28:ed:d2:66:b3:5f:
79:8f:52:09:48:8b:f9:58:19:4c:79:d5:9b:46:76:
99:54:22:3c:bd:b7:51:8a:8d:2d:c3:64:29:53:83:
a4:7e:96:d1:61:67:3a:c0:53:2d:a8:a0:01:b9:f5:
c7:96:ca:8f:e8:82:00:a4:10:66:d9:6c:91:2e:9d:
e5:56:ba:2d:c8:d8:52:6e:02:ad:ee:86:9a:5f:04:
b9:87:fb:be:74:48:34:fe:c4:c9:22:c5:d6:b4:ba:
6d:99:b8:ab:d9:2b:da:38:11:f9:9e:73:28:7d:44:
09:34:a8:61:ad:01:4d:92:2e:7b:85:e2:a4:66:c5:
cf:ce:37:99:62:d8:be:81:b5:41:5f:12:b7:fd:27:
31:48:67:d5:fb:f5:df:f8:53:87:dd:83:59:72:d6:
2d:d3:fc:a8:d9:49:a3:6f:d0:f8:9c:4c:67:da:13:
62:47:3d:8c:ac:1b:68:2d:7c:c3:ac:2a:fe:c4:6f:
f3:73:33:1f:02:fe:5d:1e:f0:a9:7a:64:86:00:56:
79:88:b4:d3:cd:9e:39:31:a9:53:eb:42:66:d7:ff:
7c:f4:4a:ff:9c:15:0d:1e:74:cb:f1:7a:01:93:f2:
5b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CA:12:40:9B:3C:26:C9:09:DC:FA:B2:F3:BE:1E:98:FC:E8:DA:80
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134366
140882
sbgp-ipAddrBlock: critical
IPv4:
45.120.216.0/22
103.61.36.0/22
103.152.210.0/23
Signature Algorithm: sha256WithRSAEncryption
02:d4:00:5a:d3:a9:5b:f9:da:e7:56:4a:55:2e:a8:a3:50:82:
48:d0:6f:71:e3:fe:d4:62:fc:83:e6:58:f9:3a:5c:a6:a3:48:
7d:88:42:c2:64:86:2c:b2:88:3e:49:ae:e2:a9:77:d1:ac:5e:
ea:b0:87:14:4f:22:22:91:bc:61:1b:a8:14:ca:3a:f6:bb:29:
c2:c9:f8:01:ad:83:7f:4d:d3:b9:70:3a:8f:7b:65:f9:7b:78:
51:b9:6d:a8:39:86:47:60:95:af:c1:72:68:86:6a:f7:31:cb:
b9:7e:cb:24:1f:b9:16:7f:72:12:f5:b6:8c:f5:e1:66:59:67:
27:30:f1:f8:48:a1:f5:d7:14:ae:f7:42:78:bf:5f:27:98:b7:
e3:0f:eb:48:5b:74:2c:8c:0c:c3:06:31:24:f5:ae:92:11:58:
a4:80:97:ad:bc:fb:17:1d:dc:de:52:e6:7d:0e:44:fe:92:fe:
76:a3:09:a6:cd:f0:f9:89:c0:7b:83:cd:fe:47:da:51:2d:87:
dc:ef:01:3a:c5:8c:5a:0e:73:d4:7c:8a:77:fa:46:0a:21:02:
50:84:19:c3:a9:13:10:19:b2:ed:0f:8b:69:a3:ba:b4:fd:4d:
f6:6d:73:41:41:48:4c:d5:ee:fc:5a:98:f0:6f:b4:9d:97:fa:
e3:ab:60:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:38 2026 by rpki-client