Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
File: 9FQft3ll3hSln57yM94Z-SBfX5g.cer (raw, json)
Hash identifier: yH8TZO7cRCn6cg4EP0+wKug2qGi/J/nQxATnyXqH5B4=
Subject key identifier: F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0294E6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:22:05 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 38230
AS: 137490
AS: 137509
AS: 139308
AS: 141703
AS: 142289
AS: 142419
AS: 142597
IP: 103.158.222.0/23
IP: 2001:df5:6880::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169190 (0x294e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:22:05 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9137917, serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:5c:13:a0:42:44:65:d7:8a:49:9e:41:e1:
53:0d:38:c7:3c:4e:f4:23:4f:5b:31:12:20:c4:52:
11:bc:28:44:80:22:b1:f1:a2:a2:a2:b1:ad:f9:22:
98:8b:92:45:32:5f:41:88:f6:2d:6d:cd:79:29:2c:
46:63:06:20:f6:d8:be:b8:82:85:17:49:54:f0:de:
60:f7:9b:92:fd:a0:6f:e5:64:ca:da:e1:35:17:d3:
2e:08:41:0f:0a:b9:9c:21:49:3e:3d:c5:e3:f4:4f:
88:1f:16:25:83:0e:a7:78:65:09:1d:45:36:c3:f7:
b3:77:f8:44:08:ae:3e:a5:45:cd:1b:9e:a7:0f:8c:
2d:fc:c3:c4:18:ce:c6:f2:6a:5b:e0:57:60:f0:1f:
c8:d5:82:9d:53:91:4f:7b:7d:11:05:e2:73:c5:5c:
f4:78:fb:50:79:a1:f4:86:3a:10:4a:9e:3e:9f:df:
79:d5:52:3d:c6:6d:46:82:89:63:82:d0:d9:b8:27:
d0:38:d1:ab:17:62:44:f3:8f:4b:d9:b0:63:c0:66:
20:85:34:b6:4c:76:7c:05:3b:99:cd:87:22:1c:77:
30:05:53:02:34:15:fa:aa:03:1c:99:ac:1f:e7:77:
95:f5:6c:8a:0d:74:c2:2f:87:55:f9:30:b7:05:c4:
b3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38230
137490
137509
139308
141703
142289
142419
142597
sbgp-ipAddrBlock: critical
IPv4:
103.158.222.0/23
IPv6:
2001:df5:6880::/48
Signature Algorithm: sha256WithRSAEncryption
54:80:4b:59:6c:ab:b5:b6:42:89:c3:5d:c1:c0:23:63:30:4a:
83:7d:78:91:8c:83:de:8b:d5:d0:a2:5b:e5:76:1c:03:d5:a7:
92:7f:53:6c:6f:f8:a3:bc:2e:e2:dc:ae:2b:65:87:c9:7e:ec:
e4:3e:be:c5:ac:7a:67:46:0e:cf:46:1c:ba:79:70:1e:aa:0b:
4f:83:00:0e:5e:ed:39:15:0c:c2:33:5a:5c:bf:41:f7:ef:50:
ff:61:59:8b:4e:46:95:bc:e7:75:83:fc:f0:7d:28:1b:d5:4b:
ba:ae:3f:eb:8d:15:b3:84:81:32:dd:1c:99:8c:4d:bd:ba:82:
3a:b2:04:b8:42:23:72:be:95:01:ba:37:11:f2:58:de:76:0b:
dd:bd:2f:c6:41:7e:98:fc:0b:43:ad:c7:7b:8b:7e:13:f9:e7:
63:98:47:71:ca:40:84:65:c7:eb:5c:85:2c:d8:2c:7a:7d:c1:
95:9c:4c:20:78:10:2b:e8:db:d6:df:5d:7d:1e:7e:7a:30:44:
71:32:95:5b:70:6f:08:8b:89:67:43:cd:2e:a2:8e:bd:9b:e6:
54:51:c4:19:0b:05:a5:4d:20:02:4d:4e:de:33:d4:ce:0a:fa:
0a:3a:8e:44:bf:d4:12:c3:95:c4:b8:05:d9:b0:ef:31:49:73:
61:1c:08:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:26:23 2026 by rpki-client