Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer
File: 8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer (raw, json)
Hash identifier: TuvXMp9h0BvxIpLP8tMxwkzsG4tIUZ3A/pzObVYUsIk=
Subject key identifier: F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D332
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Sep 2026 13:46:38 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 58643
IP: 43.243.68.0/22
IP: 103.12.148.0/22
IP: 2400:1c80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 20:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185138 (0x2d332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 2 13:46:38 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91958FF, serialNumber=F24F1471723A64E4D570DBB0D44C824305426266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:a3:af:43:e7:77:c1:3a:fd:2f:04:ca:ff:
fc:58:c8:d6:fb:5c:80:f1:bc:f2:7f:54:3a:d6:06:
c8:86:a3:0a:31:fe:b5:1b:15:08:ac:82:fe:b4:15:
a6:72:90:6d:65:7b:15:95:02:50:84:41:0e:7a:c1:
ea:82:c5:ed:b0:e1:97:2e:90:db:81:bc:1a:4a:85:
45:06:4b:e7:cd:e2:af:18:76:8b:43:72:03:38:41:
c7:5b:70:d5:09:e1:d2:d5:e1:8c:4a:2e:9e:b0:2d:
f2:77:76:f5:a4:d5:35:f7:a4:65:c1:08:19:0b:af:
a4:53:ac:0c:fe:bb:c0:8d:29:35:7d:11:b6:9f:f3:
8a:66:b4:77:99:95:5c:4a:54:b2:79:bb:e6:bd:b6:
39:98:78:8d:c7:8e:f3:03:bb:3d:87:82:ee:93:6d:
f6:3e:a3:2a:9d:85:1d:e0:d1:14:1e:9e:3e:f1:bc:
4f:27:c7:97:a0:2c:23:da:d1:f3:d2:6f:7d:7f:34:
59:9d:17:62:36:62:6d:9c:ce:29:3d:d9:39:1e:12:
42:86:47:a2:e7:c6:e2:51:25:63:c8:48:64:f0:50:
03:5a:4b:68:41:5c:2d:a9:a2:56:c6:99:74:36:2b:
f9:7e:3a:2e:57:69:e2:64:73:85:0e:02:25:9e:ea:
31:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58643
sbgp-ipAddrBlock: critical
IPv4:
43.243.68.0/22
103.12.148.0/22
IPv6:
2400:1c80::/32
Signature Algorithm: sha256WithRSAEncryption
a9:a6:93:07:35:f9:4e:a2:44:2e:06:21:37:23:bd:5a:78:9f:
6f:5b:f7:d5:18:dc:0b:a7:dc:57:76:3e:f6:d1:89:73:1f:ae:
02:74:f6:e2:2a:f7:7e:57:e8:37:bf:c5:44:bf:d4:0b:72:89:
7c:dd:b8:61:5b:1c:c6:3b:bb:cf:15:8a:56:4e:5b:48:6c:6d:
00:13:b5:89:13:43:8b:74:97:0b:5a:7a:fa:c2:63:d4:bb:3d:
e3:9c:65:27:d5:97:0e:be:4b:94:a9:88:dd:de:76:a7:e7:8c:
df:a2:c1:cc:4c:32:76:4c:5e:08:d4:a3:df:ea:fd:f3:21:70:
17:03:42:67:3b:8e:1f:1e:1e:dd:c5:79:fe:be:91:39:8f:f8:
6c:28:5f:a3:23:a1:b6:73:26:70:e1:13:4d:46:3e:98:2c:ca:
0a:c8:f1:fd:b5:40:74:e2:0d:52:8e:a2:de:f8:18:ec:00:ab:
fa:66:13:9d:c1:b2:e7:00:c5:82:c4:71:e8:a1:55:99:3b:29:
3a:d9:ec:61:c7:af:f3:ec:bf:70:4d:b3:5b:1e:fc:c2:69:aa:
84:7c:99:19:18:22:4a:98:d7:ea:2f:10:87:66:a0:74:71:b0:
69:2a:e9:5d:0e:23:c7:bf:2d:53:57:cf:e3:66:81:d0:fb:77:
08:31:47:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:26:49 2026 by rpki-client