Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer
File: 3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer (raw, json)
Hash identifier: TTvfd0gtxrCjmPEsp3fjMQNgS5nMN2/U7kqHJT3OSWs=
Subject key identifier: DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029DA2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:03:06 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 140063
IP: 103.148.10.0/23
IP: 2001:df2:fd80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171426 (0x29da2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:03:06 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91BA447, serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:97:6e:1f:80:a0:48:2c:68:3d:ad:57:79:
10:71:78:50:99:30:1f:e5:33:23:6d:ae:18:f5:77:
ac:a0:84:f0:f4:0c:59:5a:c0:dc:59:5b:fa:14:05:
c7:ef:4d:c3:52:41:e8:e1:1e:9e:2d:15:c6:f0:82:
0f:0b:4f:96:90:9d:cf:39:86:75:60:7d:73:3b:69:
de:e2:d5:b0:08:29:38:0e:43:4f:c0:52:11:66:e6:
5a:b5:cd:a1:4f:7e:28:f1:e7:bf:35:d7:be:83:31:
ae:19:51:46:b0:e2:5a:d3:e1:2a:26:b0:4a:67:4f:
48:41:3f:fd:79:4f:ad:cc:91:67:d8:f1:56:db:19:
40:02:29:38:eb:c1:61:85:cc:04:c7:01:c7:2d:0b:
ff:ec:7b:bd:5b:0c:58:19:39:7c:fd:06:a9:4e:b8:
46:b3:59:f5:d3:ba:09:09:c4:9b:84:50:1e:52:6b:
d3:54:d3:46:90:72:8f:6d:73:cd:09:e2:4a:b6:09:
28:e9:0d:9e:2a:f3:b6:45:40:44:7d:08:5c:85:44:
c7:14:7c:2e:e6:02:62:6e:2d:b9:dc:5a:55:13:5e:
97:fd:0b:f3:35:4e:d4:79:0f:f1:be:23:66:62:88:
f7:4a:0c:83:4d:25:a4:07:8a:00:c7:29:91:31:77:
dd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140063
sbgp-ipAddrBlock: critical
IPv4:
103.148.10.0/23
IPv6:
2001:df2:fd80::/48
Signature Algorithm: sha256WithRSAEncryption
d6:c2:fc:18:c9:1d:3b:d6:0a:51:76:71:09:06:ea:5e:60:74:
19:a4:24:f2:c1:61:1c:40:45:25:ec:fc:15:36:93:f8:50:1e:
b9:7e:59:61:0a:5b:53:cd:bc:3e:ec:65:b4:b0:eb:28:57:5c:
cf:e5:1b:11:9c:f8:48:1f:ed:ea:3d:4f:b8:7e:97:af:3f:40:
05:e7:72:24:ad:c1:a8:6d:f3:27:70:fe:e6:c3:ff:d3:e3:82:
8d:ee:07:fb:61:50:7e:c3:06:14:37:4c:99:d0:29:68:d8:1c:
44:c2:7b:ff:d0:a7:df:7d:96:c3:0f:4b:d7:02:18:20:f6:da:
d7:2a:30:06:2f:63:66:59:a6:37:32:3e:75:92:b3:2d:91:f0:
84:84:41:96:ca:8a:9c:0b:2c:89:ea:9e:6b:4e:c4:48:c6:81:
f0:84:0e:a4:25:5c:c4:35:ec:c9:75:1c:df:c3:30:b3:aa:96:
e2:57:d9:95:3b:3e:d1:27:a3:26:5f:33:90:15:f9:31:89:ae:
f9:5a:64:1b:71:dd:06:8c:89:da:09:9d:c7:ea:8d:f4:63:26:
11:31:d8:cd:e2:6e:4b:ac:9d:f8:60:5a:6b:25:40:88:6a:d5:
81:e5:c5:b9:b1:36:33:68:73:c4:97:b6:3b:2e:48:8b:a4:7b:
2d:8a:b4:47
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:14:33 2026 by rpki-client