Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqglKUeKDl1O1khC2zyxUkVwB4.cer
File: 1lqglKUeKDl1O1khC2zyxUkVwB4.cer (raw, json)
Hash identifier: Mx+2kChldSZ8Ovz/SD/SyG5rFbsiN85B50/IqLHaNLY=
Subject key identifier: D6:5A:A0:94:A5:1E:28:39:75:3B:59:21:0B:6C:F2:C5:49:15:C0:1E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B9B7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Jun 2026 13:23:51 +0000
Certificate not after: Thu 01 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 134105
IP: 103.52.228.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178615 (0x2b9b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 2 13:23:51 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=A915C1AA, serialNumber=D65AA094A51E2839753B59210B6CF2C54915C01E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:48:7e:0d:72:e2:3d:7f:55:76:51:9d:fe:
77:b3:5d:87:c1:d2:ab:25:bd:e1:f4:09:a1:ef:e2:
22:e9:8a:b7:41:c8:8b:d3:93:4f:d0:cc:f0:e3:1a:
65:b2:7a:8b:da:91:75:d1:73:e0:40:46:4d:9f:5e:
0b:90:80:69:b3:97:c5:db:21:80:7f:72:cf:8d:3c:
7e:4d:b7:34:2a:58:d7:b5:51:10:35:fe:c9:f6:d4:
ce:8a:83:c7:c9:69:d3:87:56:8c:3a:a0:11:34:84:
1e:97:cb:70:60:51:2b:c8:ca:76:8f:ba:6f:0c:d4:
c3:dd:33:74:e5:a7:62:0c:07:2c:a5:61:51:c1:18:
c5:a1:0d:5c:df:8e:25:f2:79:fa:25:79:cd:c6:48:
37:7a:68:08:82:ef:10:02:ea:b2:f2:92:57:3a:c6:
73:a0:47:55:58:cd:a8:8a:58:92:0a:fd:2a:1e:70:
aa:be:84:bf:59:c8:66:7b:57:ea:b7:f1:d1:38:d8:
19:34:6a:e5:22:7b:c0:e6:6b:83:64:28:ba:a0:4a:
c2:93:77:c6:0d:49:6e:25:09:cc:b7:7c:01:17:08:
15:77:76:0a:6c:76:76:70:be:ea:a7:50:43:16:40:
d8:fd:a4:36:c1:d5:d3:14:1e:83:58:a5:4e:b7:a3:
69:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5A:A0:94:A5:1E:28:39:75:3B:59:21:0B:6C:F2:C5:49:15:C0:1E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915C1AA/6C9D26307F2011EAB57D5732C4F9AE02/1lqglKUeKDl1O1khC2zyxUkVwB4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134105
sbgp-ipAddrBlock: critical
IPv4:
103.52.228.0/22
Signature Algorithm: sha256WithRSAEncryption
52:32:cd:ab:8f:e0:21:51:f0:94:b3:ef:55:0b:44:3b:b6:6d:
0e:b4:58:ae:7a:bf:aa:0b:c8:f1:9a:52:8a:a7:ab:bd:79:7d:
dd:a7:3b:d1:76:f1:a1:c8:6c:af:2b:bd:26:50:26:d5:7a:26:
57:e4:53:0e:ec:e6:9f:c9:b8:9e:21:2e:83:a0:a6:f1:3b:90:
9d:58:55:1b:b1:4d:5f:c4:e1:62:af:10:b5:ae:74:f6:a8:64:
f6:24:44:fb:24:f8:8f:8f:45:48:54:40:39:85:ca:f7:b5:11:
2e:cb:9d:a0:3f:05:3d:d2:bc:2b:b7:07:a7:d4:2f:69:fd:0a:
59:88:de:18:72:7a:49:a3:12:a3:38:a1:23:1e:f5:aa:d8:d8:
29:ae:24:b4:74:86:9e:b5:30:87:8f:80:44:2d:dd:0d:31:3a:
09:b3:42:b3:86:59:12:74:fa:5d:fa:9c:9a:c7:74:32:07:63:
26:d7:3f:7c:86:27:d8:e4:4e:b0:a5:7b:c3:8b:6b:83:d3:fa:
20:db:c8:d7:65:1d:48:8d:57:e6:3c:ab:5f:57:b8:3e:e9:9e:
df:6b:0a:67:e9:26:0e:d4:a2:d3:a9:5a:66:c4:63:cc:2f:c6:
29:ae:2e:dd:cd:a6:40:ed:81:c8:48:0e:af:ae:6e:6d:33:fc:
c3:e8:a5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:59:39 2026 by rpki-client