Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
File: 2y3U_v83CRJX9gGdUKI5MOxG4fs.cer (raw, json)
Hash identifier: 1C+uJbooKu9YkGc1f4cJfrYGcNAyRDMgzU135UEN2vE=
Subject key identifier: DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029C00
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:55:25 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 24374
IP: 203.105.160.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171008 (0x29c00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:55:25 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A917F116, serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:86:55:03:0e:2c:74:78:32:54:f4:04:1e:e6:
6f:72:68:c5:8f:25:33:d5:80:c2:c5:d3:56:92:88:
2c:fa:77:bf:7e:1f:56:e3:7f:d7:ae:00:cf:e8:74:
17:c3:2e:c7:b0:dc:00:de:3b:c9:4a:82:99:aa:3a:
53:85:9e:df:97:09:f2:25:c3:9b:58:58:e9:76:31:
8d:28:ce:e2:ae:da:d9:8d:60:71:c1:19:00:cf:42:
71:23:65:34:19:8c:8a:5c:0b:7f:4b:e3:ca:43:10:
fa:b3:6f:19:37:8d:7d:a3:48:e0:22:67:78:fd:2d:
6f:5f:79:54:5c:ca:65:c0:02:94:f4:a2:54:32:f7:
13:37:37:28:89:ff:71:bc:89:e1:04:ae:87:dd:ca:
65:70:42:16:ab:b9:da:f5:77:1a:ca:0a:a2:f6:8c:
a9:bc:2e:a4:ba:c3:08:9e:20:64:0d:23:ae:57:53:
c1:02:6d:dd:6c:96:e7:c7:ca:c2:81:07:5e:44:52:
89:a0:96:b5:d3:62:6b:4f:a5:03:fd:d9:ce:93:43:
09:ae:81:49:be:01:8b:98:22:f7:fc:43:a8:8d:2c:
32:08:76:98:b5:85:12:ee:e2:ae:ae:a0:d6:69:42:
e3:e3:3a:57:ad:0b:3c:f6:1f:e6:3d:2d:ce:b5:1b:
df:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24374
sbgp-ipAddrBlock: critical
IPv4:
203.105.160.0/19
Signature Algorithm: sha256WithRSAEncryption
5d:dd:bf:b6:8e:2d:f8:35:65:5f:f7:3a:e5:d0:3f:92:8d:18:
56:ed:ac:71:6d:20:d3:38:3f:ef:ce:36:c2:69:f5:fd:25:76:
a7:d4:1a:fe:91:8b:58:9a:39:1e:e9:31:be:94:29:66:2a:66:
b4:9e:cf:b3:27:1b:25:6e:92:46:55:5a:3f:ed:78:aa:00:4e:
88:8a:de:9b:47:4a:15:38:30:89:f7:d0:3d:b9:12:52:9c:15:
2d:77:51:24:a1:8b:7d:f3:f8:a4:96:3d:3d:6c:77:6f:cc:d4:
01:d5:5b:8f:b6:f0:ec:78:c2:59:08:dd:2f:33:51:d9:60:48:
88:c1:9c:18:40:8f:fc:64:45:32:6a:ad:ba:41:33:4b:7f:1b:
15:e9:d3:68:1f:97:7b:e3:cb:51:44:9f:92:63:76:12:16:f5:
09:77:72:07:79:d3:e0:fc:30:1f:6a:1c:d5:bb:a3:02:7c:90:
6e:07:fb:be:cf:eb:bd:b6:2c:f8:0e:e4:3b:90:ef:7a:80:22:
f8:d5:a4:2a:9d:f7:c0:6a:4e:ce:5f:b5:8e:1e:8a:c5:04:19:
a4:85:8e:f5:b3:22:ea:ca:11:e5:5f:65:65:14:32:47:b7:4d:
e4:84:53:98:86:46:90:4b:e1:cb:ac:6c:85:b9:8d:89:99:e7:
72:97:c7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:01 2026 by rpki-client