Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer
File: 3EdNayXV4aHNHSkADMwU6vkzQdI.cer (raw, json)
Hash identifier: cl3sgf8lN4OtJjV4AJNzHkG8IfgE1WVxO5SLjOWIFpw=
Subject key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D205
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 31 Aug 2026 15:57:45 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 10112
IP: 103.70.136.0/23
IP: 2001:df3:b200::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184837 (0x2d205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 31 15:57:45 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A917C373, serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:ae:df:e7:43:8d:56:b8:ac:50:f3:bb:54:
12:88:4f:3e:0b:64:19:a3:fd:04:61:ba:ef:f9:60:
c9:57:ec:77:88:77:2b:ff:35:e6:03:f5:88:1e:26:
7d:2c:94:9e:f2:4b:52:16:53:2d:b5:14:79:d1:7f:
f6:2f:6a:e1:2e:c6:bd:09:7b:c4:59:79:67:58:99:
3a:c2:1e:57:68:38:11:3b:c5:0c:93:78:98:3a:7f:
a7:53:7d:16:50:58:5e:96:97:78:9b:d7:c2:a8:88:
c7:8f:fc:df:a1:af:bf:4b:63:f4:55:57:64:9a:8b:
f8:64:f5:3e:41:5f:fa:9c:15:98:41:35:e4:08:28:
d1:07:6f:79:e2:6a:ec:30:c3:37:23:84:9a:d0:4e:
87:3f:bf:e5:72:2b:50:12:64:5a:51:cf:76:a5:e9:
0d:ac:c1:82:6c:13:52:3d:af:9e:99:12:f9:cd:35:
d0:6e:c6:32:2f:0e:d0:4b:a8:43:e3:a2:3d:84:ac:
89:61:2d:af:18:03:57:cc:6d:9b:eb:62:c3:b8:fa:
79:31:b4:2f:19:ae:17:5f:4d:8c:c8:08:3b:a6:02:
ba:92:25:23:22:3e:ac:ce:78:31:74:84:64:39:8c:
69:93:84:65:b8:18:6b:c1:a4:d7:af:6b:d0:42:ed:
39:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10112
sbgp-ipAddrBlock: critical
IPv4:
103.70.136.0/23
IPv6:
2001:df3:b200::/48
Signature Algorithm: sha256WithRSAEncryption
02:81:a3:89:d9:ad:4d:9e:5a:d8:46:b8:56:37:60:69:b8:29:
7a:b5:8e:5f:dd:05:7f:cf:f0:2f:5a:a9:33:13:4b:6c:34:bf:
d3:08:ad:ef:08:70:67:cc:eb:b2:55:c2:e1:ce:30:fb:02:c6:
b8:d9:8f:7b:84:0b:30:93:17:04:d3:54:a3:c1:e9:ab:69:19:
b3:60:0e:f3:06:89:23:cf:e2:99:75:df:1f:1f:76:2c:5e:ef:
c3:fd:da:84:9a:33:d3:e8:c9:8c:7c:f7:46:c4:a5:56:7a:c6:
9c:7f:36:10:e4:bb:a1:c0:08:d6:80:04:14:5c:08:ef:b8:be:
1a:4f:a2:7a:b5:2b:ed:df:07:00:cc:04:65:6e:7a:65:16:b2:
1b:65:b1:91:52:8d:41:07:16:9d:34:56:5d:3b:c8:ec:a9:c7:
a1:38:94:cc:49:39:49:c6:4c:8f:58:27:ff:10:13:8a:6c:ec:
10:57:db:b4:b4:7e:ad:f7:89:73:49:20:99:5f:fa:d6:f5:c4:
75:75:d0:9e:91:5a:e1:e1:01:f8:f4:7e:f4:9d:af:37:fd:bb:
43:ba:02:2f:74:80:1a:06:2c:1b:16:5f:ad:ab:3d:0f:53:84:
7c:a5:3b:65:f5:c4:6e:88:34:47:fb:58:63:da:cf:e1:bb:15:
3b:56:17:00
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:06:17 2026 by rpki-client