Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
File: -ty5VaOsFGWZfQjySL-GxDNE-3g.cer (raw, json)
Hash identifier: wmPJIkdaYiR9a6EQIRo8J/sQ9i5NihqMuojDGQn03l4=
Subject key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B9A9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Jun 2026 13:06:49 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 142133
IP: 103.166.172.0/23
IP: 2407:59c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178601 (0x2b9a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 2 13:06:49 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A9148F32, serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:ca:95:19:db:32:8a:1e:fb:f3:66:8d:ef:
1c:12:05:50:01:ac:4c:05:cf:37:08:a6:12:b5:b6:
b1:d0:43:ba:ca:7d:20:14:32:a7:c4:38:10:ba:60:
03:43:ef:9f:64:06:c8:ec:fb:73:2f:c7:13:55:b7:
24:f5:cb:8d:7b:91:02:7b:76:04:14:fe:ed:47:51:
05:2d:e5:83:04:80:c7:c9:5a:bc:f3:89:4a:50:04:
96:f4:d8:7d:02:79:7f:4a:98:cb:9d:f9:25:16:a4:
f6:9a:2d:7a:8e:a6:02:1f:97:97:27:d9:ec:d8:7e:
6b:bd:eb:69:16:cf:d9:6c:39:c9:91:42:3d:0c:e6:
8c:76:4a:d6:aa:16:2a:e9:41:d4:69:d0:1f:54:03:
0d:ae:38:a7:64:ba:6e:06:4d:ad:2a:e7:34:59:ac:
f3:ae:d4:38:a3:05:46:be:ef:ba:6d:47:fa:a6:f8:
20:30:72:1a:e4:ea:96:76:f9:e6:3a:91:1e:55:f8:
e0:8c:8a:d9:f0:a9:4b:65:df:40:62:e4:ca:6f:47:
03:cc:a6:81:76:91:01:b7:16:74:9d:e4:2f:7a:fb:
6a:99:8e:7a:42:9c:29:f4:e0:96:f8:c8:d1:57:ef:
be:ca:3b:79:e5:62:39:bc:c5:cf:37:95:c1:a6:62:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142133
sbgp-ipAddrBlock: critical
IPv4:
103.166.172.0/23
IPv6:
2407:59c0::/32
Signature Algorithm: sha256WithRSAEncryption
87:42:c2:3a:f4:31:cb:76:a3:99:1f:02:7a:1d:8f:9b:cc:cd:
00:e5:ef:3a:62:62:d9:83:fd:19:9f:9c:7d:f6:0e:80:63:d6:
2d:18:f0:0d:18:98:8d:05:c5:95:ec:36:8d:2b:20:84:ba:9b:
f4:01:cc:08:96:21:f8:a2:21:87:17:1b:52:5c:e2:31:4e:fd:
b7:48:f1:75:9f:b8:b3:88:df:8f:97:08:7e:a4:1a:1d:a6:de:
60:5d:b6:37:e8:23:85:54:0e:e7:6e:98:e9:91:1c:d8:39:92:
e4:3c:ec:84:f1:91:ac:41:68:07:a6:7c:35:05:11:08:2e:ee:
4c:d1:5a:f6:e6:60:d9:91:c3:5f:e3:55:cf:1d:74:73:0b:6c:
dc:c8:98:9c:65:ce:f1:29:af:d1:6c:85:45:3c:6d:8d:b0:cc:
77:ea:21:35:ae:67:e7:d5:99:c8:75:98:54:88:fc:55:e3:d2:
73:d7:f2:e1:e5:8d:ee:80:50:19:35:86:e8:d5:b5:64:5a:dd:
4f:1b:83:2f:f1:d9:4d:ea:ee:08:75:a8:78:b1:46:10:08:da:
38:37:db:d0:b3:be:ad:f0:23:db:aa:bf:01:e2:95:75:62:4a:
39:51:01:cd:95:99:98:20:29:7e:88:56:97:d9:74:cb:65:f5:
71:e2:6c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:44:34 2026 by rpki-client