Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer
File: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer (raw, json)
Hash identifier: oCPVsc6KQVOw2xfUjA5VCgRGZFmGSkxA2iFTOPpca2U=
Subject key identifier: F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A013
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 13:05:51 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 137435
IP: 103.108.112.0/22
IP: 2406:d240::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172051 (0x2a013)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 13:05:51 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9153049, serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:77:eb:62:8e:c7:a6:86:da:1e:0d:4d:f1:fc:
3c:48:dd:c5:3f:dd:0e:3d:1f:2f:4b:88:b2:bd:4b:
ac:76:80:61:e8:a9:bd:96:47:17:36:af:bb:eb:50:
bb:1c:4a:8d:3e:74:c7:db:c2:fa:b0:31:ab:da:ed:
6e:95:11:6f:8c:31:b8:0d:19:6e:4b:90:51:d5:74:
90:56:c2:5c:a2:08:ed:cf:67:37:81:33:d7:a5:40:
2b:7c:1c:38:c7:89:33:dd:d9:c4:0a:f4:8b:70:1e:
f1:f9:93:93:ca:55:1b:89:ae:4a:26:bd:be:b5:04:
af:ba:21:d7:79:17:11:52:5c:6e:3e:6c:71:f6:2d:
f3:9a:aa:bd:88:de:bb:9c:17:55:13:b7:f1:ca:d8:
77:20:9a:9b:0a:e6:90:bb:6b:70:a8:d1:2e:59:12:
01:30:ac:bf:52:47:ec:78:62:7d:7d:ce:29:6a:42:
d1:55:f2:da:99:e5:1c:91:63:7d:0d:9f:3e:5d:7f:
2c:4c:f7:77:fe:db:61:25:32:48:4f:cf:9e:16:18:
7b:68:77:25:d8:3d:10:8b:df:21:04:52:17:96:1b:
78:c3:d5:fa:e4:8d:34:5f:fe:f5:66:a8:90:c3:f7:
3f:56:c8:8c:a7:19:86:2f:7f:5e:00:a4:52:d9:a1:
d9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137435
sbgp-ipAddrBlock: critical
IPv4:
103.108.112.0/22
IPv6:
2406:d240::/32
Signature Algorithm: sha256WithRSAEncryption
b7:e7:3b:05:5c:70:82:77:e4:9d:ae:b6:7a:22:b2:3c:73:53:
e8:0f:32:17:e8:52:e0:fa:7f:aa:23:30:6c:c7:2f:e1:02:f6:
58:a5:0f:94:55:40:57:54:ea:78:27:cd:11:cb:72:f1:9f:8d:
41:e5:cb:8f:0f:74:8b:fa:d2:5d:12:a7:dc:57:6b:c7:bc:a9:
d8:25:2b:67:3c:19:81:ce:ad:b7:f0:16:48:93:4d:b3:d8:54:
93:6e:8a:c2:81:6f:9f:55:7d:77:bf:49:90:c6:16:3d:c9:1c:
b9:3b:cb:15:2a:c1:61:aa:88:c9:c3:b3:b3:fb:46:7f:48:0d:
cc:2d:10:c4:32:88:68:bb:df:be:59:36:63:10:c3:01:70:da:
18:64:7a:6e:35:c2:c0:d5:86:c9:46:7d:bc:cf:d2:64:6a:5b:
48:4e:d5:45:4d:9f:47:c3:43:f8:fd:26:9c:11:49:5c:ff:48:
d3:55:cc:bf:21:db:2b:79:6c:03:e6:c8:da:10:0a:1d:39:fc:
31:8a:bf:c3:44:b7:50:8e:bf:0f:c8:a3:9b:41:36:71:29:08:
69:ad:41:b5:80:3e:18:7a:eb:02:78:9d:e3:dc:e4:28:55:f3:
51:f2:61:aa:b3:aa:f7:2d:79:e7:94:f8:c5:ca:a0:6f:37:92:
ed:b0:c0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:20 2026 by rpki-client