Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
File: 1QTYGQKxg4soKun0XE3D-BeOJO4.cer (raw, json)
Hash identifier: nMOJoQMJqmEbMI1sQw5DlPnuZCKBTryK5a5QRqaM9uQ=
Subject key identifier: D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CCCB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 12 Aug 2026 12:39:53 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 131240
IP: 103.68.107.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183499 (0x2cccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 12 12:39:53 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A913A74D, serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e9:0e:47:fe:aa:3b:4c:c0:2b:a7:af:3f:17:
11:27:27:0f:97:ec:18:17:3d:fa:d1:8d:10:25:d7:
30:cb:18:e8:b1:96:b2:55:0c:90:46:92:bc:cc:1e:
ce:51:4f:67:90:48:f2:f1:c2:ce:aa:9a:f9:a6:57:
c9:12:64:e9:13:a5:13:aa:c9:e2:eb:e9:82:3d:ed:
f8:fd:09:d8:fc:3c:e3:36:08:63:1e:ea:15:bb:3d:
95:12:ed:91:fe:85:9f:5f:7e:a7:71:68:b2:f6:33:
cc:e4:fc:03:86:f3:e2:ed:d7:b8:91:cb:dd:0a:fa:
d0:6c:e5:66:78:19:ca:f8:8c:2e:7d:c4:5a:d1:8d:
1d:cc:1e:f6:24:a8:bd:d3:74:a4:c0:ad:e1:dc:c2:
6a:43:8c:85:d7:d8:6c:b6:b0:4c:6a:12:1b:28:d1:
04:7a:c5:fd:75:7f:56:96:a1:78:60:b0:ed:9d:fc:
cd:eb:ba:7d:cc:88:e9:a7:36:3c:f3:57:3f:15:a6:
7c:ee:50:83:de:7b:0d:0c:44:66:b2:03:44:b1:9e:
98:22:8b:1a:f7:89:b4:b9:ad:31:f8:3d:03:68:0f:
c3:74:ff:01:a1:43:db:a2:0d:62:28:6e:79:7b:1a:
d8:ef:7a:0c:a6:55:c1:c4:01:32:ed:86:80:51:56:
f5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131240
sbgp-ipAddrBlock: critical
IPv4:
103.68.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:d5:75:2f:99:4b:70:2a:a4:7c:13:6d:72:96:dc:96:41:87:
a3:5f:12:ad:8e:68:b0:f3:38:b5:bc:04:6f:9f:18:c7:52:15:
3c:86:6b:e7:79:4c:89:14:04:c0:06:3c:83:6c:cc:6c:8c:3d:
a8:8f:3b:cf:c9:ba:5f:e3:46:38:6b:06:08:50:89:a8:45:44:
14:40:c3:97:4a:16:97:44:aa:07:27:b9:24:5d:77:18:9a:3f:
4b:63:76:12:4e:a6:28:6d:f2:37:5d:84:ae:0a:1f:85:9c:7f:
76:3d:b5:e9:37:0c:3e:02:af:75:bb:ec:af:ed:44:a5:d4:f2:
95:3f:1b:42:cd:40:a7:2a:aa:0d:4a:9d:23:23:06:9b:f0:6c:
a1:23:e2:08:00:ec:29:d1:9d:3a:fe:af:c6:af:fe:4e:a5:4c:
56:e8:55:c0:9d:fe:45:39:52:4d:d7:0e:d9:46:54:c7:dd:ef:
42:0c:ae:06:b5:47:df:90:85:5f:79:46:d8:52:cc:b0:fb:89:
50:1d:87:66:f0:54:d9:7b:51:d6:8c:d3:a1:c4:18:28:83:8d:
6b:f2:e5:32:0b:80:0e:85:f6:d7:75:04:82:26:d0:cd:de:24:
d0:17:1f:3f:d1:d9:9f:eb:36:62:e1:19:e8:51:31:45:07:38:
3b:dc:e5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:35:57 2026 by rpki-client