Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer
File: 83YJDdec9qJZrioXAgNy6eYWC7Y.cer (raw, json)
Hash identifier: Ziz3UWF+lG3aw5nG1g5j1x0S5GVgy4HzH4cvT04jEfA=
Subject key identifier: F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0295EB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:26:37 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 134782
IP: 103.127.36.0/22
IP: 2404:1940::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169451 (0x295eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:26:37 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91E8EAD, serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:27:87:e6:89:4e:95:b0:a6:ca:2a:a9:1a:
ac:cf:a8:4e:23:ca:d5:f1:f1:68:45:44:aa:ce:fd:
3a:29:60:bf:eb:ba:89:90:bc:ef:a9:19:d2:69:53:
62:2a:33:3e:36:4b:73:d5:0b:25:e5:13:85:10:0a:
80:7a:32:a6:7f:60:76:7c:d2:f3:88:fd:9d:fc:48:
9a:02:92:b9:5a:0b:d0:e1:93:ed:6c:ed:af:49:2c:
b2:6d:d2:54:42:52:32:92:e1:dd:0e:f9:92:9b:bd:
5e:b2:76:8e:08:49:90:2e:ba:03:67:90:67:5f:13:
23:21:29:1b:67:1b:1a:1e:40:27:a4:88:b9:39:24:
7a:eb:b4:04:b8:c8:9f:5f:5d:89:d6:9f:b3:62:84:
6a:7a:9c:a7:eb:22:71:85:32:12:04:0e:a5:0a:18:
f7:c7:b1:09:12:19:d7:41:75:ee:3e:95:7f:f2:93:
76:48:b0:33:1e:7e:33:16:c8:b1:50:00:b5:6d:1f:
6e:19:ef:d3:4e:d7:99:b9:63:d1:e3:69:48:60:45:
2a:a1:dd:12:59:65:9e:59:a3:3a:62:f4:b0:bb:44:
b7:02:c3:80:2e:53:05:52:62:01:35:f9:9b:69:6d:
cc:1f:4f:f4:76:52:8b:43:d9:48:07:d4:2f:dd:8a:
38:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134782
sbgp-ipAddrBlock: critical
IPv4:
103.127.36.0/22
IPv6:
2404:1940::/32
Signature Algorithm: sha256WithRSAEncryption
c3:46:ca:f9:40:47:ad:d2:e0:06:eb:8c:53:3e:42:eb:fe:67:
7e:1e:0a:1a:b8:93:30:fd:30:a9:53:22:66:1f:c6:c3:30:9e:
69:b7:b9:56:d0:18:88:69:65:98:1c:1e:03:c3:2a:e7:05:ff:
e6:60:fd:c0:cf:b7:84:24:3d:36:62:dd:d7:52:7e:ee:fc:b3:
55:3c:d5:f8:6b:7c:92:a7:f6:78:bb:e0:48:63:a5:ca:be:ef:
c5:1e:58:e3:f2:2d:f9:7c:7a:20:c4:07:20:19:9a:f6:34:a1:
c2:4f:44:67:02:a5:6f:64:f5:9a:47:00:c9:37:69:f6:f3:9e:
eb:20:af:5c:5d:f7:c4:2a:ac:75:76:e7:64:ea:bb:dc:34:3a:
26:d0:10:d1:8c:fa:eb:4d:48:86:67:21:72:24:44:cc:94:46:
66:1d:dd:f9:40:0b:e6:50:39:7f:3a:70:8a:c0:3e:1c:11:f5:
79:80:8a:d0:61:9b:bf:c7:5a:82:f8:fc:4c:a1:01:58:53:f7:
1d:fe:ca:3e:7e:34:af:20:9c:10:f6:cf:93:ba:69:10:b4:a4:
2b:2e:79:68:34:93:bc:41:1a:76:a3:39:0c:6e:b3:bd:c6:8c:
e9:ae:52:7c:51:51:e5:86:45:0e:3e:23:cc:61:cb:13:92:2b:
c5:14:64:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:36:02 2026 by rpki-client