Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
File: 584ZoXhVIoFdq2P_ZttviQP8-fo.cer (raw, json)
Hash identifier: K6gxuCOqGesd3fs629uNjgsTz7agakhnSSJYn+AYtI8=
Subject key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02970D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:32:50 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 134670
IP: 103.38.54.0/23
IP: 2001:df2:3dc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169741 (0x2970d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:32:50 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A9190CC7, serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:e5:79:74:2b:ad:67:b1:92:23:38:10:9b:
fd:48:e3:32:43:70:eb:9e:ab:58:16:d8:57:46:e5:
19:91:7d:6e:8f:3c:ee:3d:61:2c:81:45:0b:fa:ec:
9c:d7:ea:9a:69:e0:99:be:ca:4a:d9:c8:fe:33:59:
e2:37:6d:c5:b0:84:54:90:00:df:f4:ba:a2:b9:55:
4a:c2:39:e7:3c:25:02:78:02:74:e5:df:e4:8a:ee:
69:c6:4d:6d:5f:08:04:29:93:ca:54:84:7f:02:8c:
8b:35:f9:bb:14:ca:78:25:8f:6a:a1:24:c1:95:fa:
a8:e6:cd:2d:7a:b6:48:ec:9b:07:c8:98:6a:1a:2b:
5c:f2:e5:9f:61:dc:e8:d6:56:d5:3a:1d:83:d9:bc:
6a:d0:6b:b2:84:b3:69:99:44:87:b3:0a:64:b5:d7:
97:db:e7:fb:40:dd:cb:29:2e:29:c8:65:4d:ec:c1:
f6:d4:bb:93:19:2a:e9:4c:de:fe:a2:61:dc:eb:bf:
a2:38:53:02:16:87:e0:35:a0:7a:9f:df:16:e1:3b:
c3:21:c0:81:34:8d:79:0b:11:50:31:40:36:c3:30:
2d:a8:77:5b:de:27:4d:ae:af:0b:98:7b:b6:7f:66:
e9:56:3b:72:ae:47:b6:b6:08:e7:53:68:61:ad:92:
4b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134670
sbgp-ipAddrBlock: critical
IPv4:
103.38.54.0/23
IPv6:
2001:df2:3dc0::/48
Signature Algorithm: sha256WithRSAEncryption
43:15:14:41:f6:01:20:a7:07:0e:93:6d:28:0d:f9:4d:a0:9a:
22:05:a0:04:93:28:ee:49:de:ad:ba:15:76:58:80:2b:6e:fa:
72:6e:97:b2:97:87:c6:1e:0c:e0:ae:5a:6f:5b:dc:36:c1:dd:
be:79:2e:0a:9c:51:4d:8a:6e:b3:a1:78:28:83:c0:57:bf:ba:
a6:7c:b9:86:8e:fd:e3:17:bd:63:53:ca:fc:38:9d:5a:5a:47:
24:80:dc:32:4a:9b:dd:03:4d:a0:30:5f:40:51:22:2e:0c:98:
d8:51:f7:4d:98:e5:55:a0:bc:21:6f:5d:9e:ea:58:01:0f:aa:
85:c0:ea:fd:dc:88:84:6b:db:29:c1:0a:31:28:35:07:8c:f4:
bf:2a:d2:b1:6e:65:b6:42:b5:47:95:cf:02:da:a4:c8:12:10:
22:a4:5b:10:c3:5f:32:07:66:67:ed:ca:24:fc:34:57:96:ff:
b8:7c:67:4c:4a:20:1d:3c:f6:60:3e:83:ce:70:45:60:9e:fb:
d0:34:f4:4c:80:77:b3:f1:11:99:1e:b2:0b:c2:4d:d9:bb:30:
41:9a:9f:b3:ee:87:65:0d:60:20:c1:85:82:67:f7:44:08:ea:
6a:4d:71:25:7e:ff:6e:ef:9f:d7:0b:a2:b4:db:51:4c:71:77:
d5:1e:38:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:40:38 2026 by rpki-client