Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
File: 7fcsXLhSsiwvD1JSESKNRQej-cI.cer (raw, json)
Hash identifier: tqijvVPSStoA7yIL+ByXKFFMSoS8B00RuK7am0xNbrA=
Subject key identifier: ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D5EF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 14 Sep 2026 12:37:09 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: IP: 43.239.176.0/22
IP: 103.35.116.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 16:34:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185839 (0x2d5ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 14 12:37:09 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9130CD3, serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:12:50:af:76:bf:6c:1f:a3:de:34:ce:eb:f1:
8f:8d:83:f5:f4:0d:9c:71:e0:e8:9f:a4:19:64:91:
e2:0a:c5:ea:90:21:00:3a:08:2a:56:09:b7:37:1f:
a3:73:51:69:7c:18:e9:01:fb:be:5f:c1:93:96:dc:
e0:93:f0:ce:d7:81:6a:b4:78:45:79:81:28:fc:ba:
0a:ba:0a:6b:04:71:9c:b3:92:6e:0a:60:c4:b1:86:
f8:d3:81:35:7c:a7:28:93:56:89:2f:49:ee:20:e9:
50:dc:26:10:7a:a0:62:8a:4d:49:e7:9c:8f:cc:ad:
0e:5e:3b:08:52:19:56:71:e7:bd:39:aa:95:fe:37:
2f:e6:d6:98:58:e2:34:09:10:7d:1b:c8:d9:48:a2:
db:e0:79:89:6b:22:71:68:76:6d:73:c5:cc:68:bf:
d0:fa:f0:b2:90:4a:7d:18:98:b8:5c:35:bc:f5:79:
6e:6b:52:25:2d:20:29:cc:a9:8b:6f:ef:1f:68:db:
83:0e:3e:6a:37:de:ca:09:b9:e4:70:2f:d7:38:1e:
19:b6:01:3b:f1:8e:a9:c3:86:73:9a:f1:9e:4b:4d:
f1:f7:ef:c4:18:e6:5f:e4:f2:15:b6:5e:14:81:30:
3f:ab:50:17:38:36:3e:55:78:dc:01:a9:18:d7:37:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.176.0/22
103.35.116.0/22
Signature Algorithm: sha256WithRSAEncryption
00:a5:4e:67:b1:30:19:ef:f2:75:0b:3c:54:5b:a8:52:8f:d9:
aa:84:57:cb:80:af:63:a7:95:4e:fa:37:6e:fd:a9:7c:37:d3:
fb:3f:b8:2d:24:4a:a4:4a:59:1c:d2:b6:69:9a:a2:88:20:28:
49:06:08:ff:fe:16:ca:dc:26:32:70:bb:03:12:77:43:f2:f9:
6e:87:f2:04:5a:fd:63:b4:01:47:7b:e8:97:01:a7:4a:f5:79:
54:9f:6e:dc:67:32:64:85:f3:d4:40:27:34:e9:06:2c:77:a8:
0b:dc:11:df:13:52:9b:8c:dd:4e:7f:96:17:41:00:32:43:80:
e2:2a:1d:fb:2b:9c:09:9b:f3:d9:4c:9d:e9:9a:aa:bb:60:2d:
d1:39:42:be:53:48:ec:07:c4:be:51:7e:af:cf:7f:e3:71:dd:
99:c1:de:39:5f:cd:ea:fb:6f:99:25:56:be:f1:6c:b9:69:0a:
a7:c0:17:06:a1:f0:1a:91:fd:59:bc:40:aa:63:01:61:f8:a1:
96:8f:07:94:8d:6c:ce:49:6f:f3:f6:cc:0b:4a:d3:c7:49:23:
8d:ad:90:f9:bf:4c:3f:d1:e1:8e:82:ab:c4:d4:cd:1f:39:d1:
e8:c2:f0:9c:ef:18:5d:c6:2b:f7:6f:ba:f7:47:29:92:e3:17:
60:c1:81:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:52:24 2026 by rpki-client