
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer
File: 83GJVwUMS84UpOw46qzunHQkTE8.cer (raw, json)
Hash identifier: nkhCXt5Wv2x4ouF/KtiYHU5+q77qVJ1Jxu01YeWXmTc=
Subject key identifier: F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AADE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Apr 2026 12:55:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 132504
IP: 103.253.84.0/23
IP: 223.27.116.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174814 (0x2aade)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 8 12:55:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91426E8, serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6a:95:ea:f6:bf:1c:c0:d3:a5:96:72:32:0f:
b5:99:d5:fe:8b:b8:e5:7e:a3:37:72:1a:63:ad:3e:
2e:8c:ba:66:02:2a:9e:cc:e5:95:94:70:50:4a:57:
d0:25:6c:74:de:e2:9f:f1:bd:98:c7:07:29:08:f2:
fc:56:bc:05:23:82:83:26:f6:a0:e7:37:5a:a0:f5:
d9:32:9e:71:3c:e1:03:29:d5:f9:45:c2:02:ae:cf:
77:cf:81:f1:a2:98:bf:d6:e9:40:72:80:9b:31:19:
f3:9f:bc:c0:8c:9e:9c:39:92:b9:00:0f:22:1f:ba:
7d:75:2d:8c:58:26:e1:7b:e6:0e:24:c3:43:dd:8f:
6f:4d:6b:b2:65:ea:d6:8b:d0:a4:51:0c:2f:c5:d7:
7f:9a:56:16:6c:7d:57:6b:58:3f:3a:29:fa:f3:86:
15:82:8d:38:4d:20:f0:70:b7:08:e2:3a:28:31:6b:
00:2b:49:51:db:2a:97:e5:0f:63:e0:44:6f:66:56:
67:f6:1f:bf:c8:23:16:a3:5b:ad:24:7e:b8:a7:97:
4b:46:ef:3d:3f:32:6e:2a:ab:ac:63:5a:f4:b2:b2:
1b:ff:2f:dd:1a:6b:09:72:85:bd:77:b3:0c:58:d1:
9c:8d:16:e5:52:1d:de:7f:86:5f:9c:ab:48:e5:fd:
6b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132504
sbgp-ipAddrBlock: critical
IPv4:
103.253.84.0/23
223.27.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:b7:4c:37:3b:5b:2a:2d:dc:5b:a6:1a:76:5d:50:f9:5b:4e:
bd:2a:2e:43:f7:ae:17:2c:73:4a:f0:50:57:71:ef:44:06:96:
c3:20:4f:5b:fb:30:b3:fd:18:97:fb:fa:c9:91:0d:bb:71:2b:
10:5e:a9:22:63:f6:bc:93:d0:a7:9e:a0:bb:a3:6c:c1:2a:ec:
85:60:8d:db:62:97:0d:f5:85:82:a8:e7:6a:1f:20:59:56:44:
1a:37:e9:0a:51:6c:78:06:19:17:4f:85:b7:a1:fe:fa:57:23:
60:d3:5b:2d:07:cc:4a:9e:e3:f6:84:d7:0e:6d:bc:60:bd:73:
87:1b:fb:e9:2c:72:25:01:77:ee:24:61:04:f0:e2:46:0d:8d:
20:6d:d3:0f:7b:2a:6c:44:aa:6d:4f:62:fc:a4:93:94:bf:4f:
11:e0:ca:02:94:8a:bf:13:00:a9:a1:05:4c:9a:33:3b:20:2a:
e4:b6:2c:c4:9c:4c:ef:13:86:6a:1c:35:ac:ae:c4:9d:7f:e9:
c9:d8:15:9d:fd:7a:1b:90:fa:6a:4d:b7:5e:b7:21:95:d1:ca:
f7:03:20:3a:08:22:48:78:c4:c4:8b:3a:45:b5:f9:61:f1:a8:
6d:53:75:04:5f:d7:4a:97:3b:22:95:32:39:cd:b2:05:c7:72:
6e:22:23:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:22:25 2026 by rpki-client