Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
File: 9UWcujH5M_kHO1FMnLvsNPbtLko.cer (raw, json)
Hash identifier: spxcrJoIlkzbSM4zdLgW8ctjbfTImfB0vMrhPsoBJyU=
Subject key identifier: F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A78A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 30 Mar 2026 14:32:28 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: IP: 103.130.238.0/23
IP: 2001:df2:4040::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173962 (0x2a78a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 30 14:32:28 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91C0E6A, serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:00:e0:4a:7f:76:aa:99:9c:24:85:da:26:
dd:a3:ee:c8:f4:d8:62:84:0c:a5:a8:95:1f:88:8b:
17:4d:1e:8b:03:23:12:01:b0:2d:00:8f:9a:84:1d:
1e:5e:cd:a3:15:24:6f:39:76:eb:8b:6a:50:ce:cd:
d2:45:b8:9e:13:f4:cc:37:66:05:3b:87:b3:6a:11:
c0:30:b0:9d:91:47:47:ae:d5:e3:e2:ea:cf:4b:ac:
01:3d:1b:44:56:38:96:52:18:07:0a:1e:58:db:55:
6e:6b:6a:02:3e:59:74:b3:9b:b3:6d:3d:10:23:f5:
69:19:56:3b:0c:f6:64:0b:85:4b:f3:86:b9:c4:ef:
c1:f3:ca:9e:62:82:8d:bf:29:9d:b1:73:b8:05:a3:
3f:21:4f:12:c7:6a:b2:b8:f5:02:e9:04:8d:1d:3f:
3c:f7:12:9e:ac:d7:ae:63:f8:13:d4:12:c9:8f:2b:
42:a6:61:2e:3f:7e:b4:61:92:83:2e:e7:56:f0:ff:
07:d7:27:7a:87:44:06:78:40:e7:7c:40:27:69:a3:
33:dd:a0:91:7e:60:92:9f:56:d4:85:09:07:9d:36:
93:da:8b:12:a7:a7:37:28:99:34:4a:c2:01:48:95:
6d:6b:32:ea:93:67:01:2e:d2:89:60:5b:fd:1d:a8:
54:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.238.0/23
IPv6:
2001:df2:4040::/48
Signature Algorithm: sha256WithRSAEncryption
b9:53:da:73:91:d8:57:16:d6:81:0c:89:a0:95:06:d0:b8:bc:
5d:16:31:f7:97:4b:43:87:0c:da:41:aa:58:e0:f0:fa:b7:6c:
99:c7:1a:98:cd:4d:be:5a:63:28:04:1f:31:97:35:34:5c:ef:
15:e2:32:95:d4:55:3d:19:3c:b0:8a:65:8a:3f:74:8e:23:a3:
30:73:41:10:99:5c:3d:18:30:58:62:2a:1d:13:85:16:5a:d2:
93:30:dc:7d:f0:b5:14:b0:56:42:d8:70:d3:60:9c:bd:25:f7:
c0:97:4b:a8:f7:fd:58:47:6f:26:8f:57:25:e7:0d:91:4c:44:
3f:54:2a:a5:f0:d0:dc:b9:b2:f6:4d:21:74:f1:14:2e:b9:e7:
6c:84:ac:e3:51:8f:82:87:af:ba:a0:e2:8d:75:bc:ba:31:a7:
95:4f:ab:19:89:d4:e3:43:72:2f:26:ea:d0:fa:39:3f:60:35:
cc:ae:8d:bb:b9:3f:24:c8:5f:0b:e4:9e:a9:e2:cd:d4:7c:24:
18:e8:4e:45:14:fe:d0:af:9d:8f:5e:5b:61:c1:90:4d:80:77:
88:1d:3d:90:eb:17:42:4e:ca:b0:b0:ca:0e:bf:f8:57:71:e5:
a6:7b:5b:66:b5:06:ab:36:29:96:3e:e8:e8:7c:16:73:db:87:
82:85:f3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:04:56 2026 by rpki-client