Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
File: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer (raw, json)
Hash identifier: xfRqQzMQ97B+HEPgG/LZo8li2Li57WTmWJyfbFNCCw0=
Subject key identifier: F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0293F5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:17:35 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 17979
IP: 103.83.168.0/22
IP: 203.89.112.0/22
IP: 2400:9440::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168949 (0x293f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:17:35 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9135604, serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:d3:83:1b:aa:f7:74:7f:e1:fb:f9:bb:9b:
58:76:20:6a:9d:b9:b5:20:7e:0e:6d:99:a2:1f:4b:
56:77:67:d1:2f:a5:a5:7f:d4:1d:07:d7:4c:d4:5e:
5e:40:67:b3:eb:cf:db:4e:f8:47:6c:c5:01:95:e8:
93:fc:07:51:af:c2:06:9c:17:b4:fe:8b:e1:7e:dd:
a5:5e:0c:dc:20:af:b6:f6:b6:95:ef:d9:ef:68:9c:
ac:38:cb:90:dd:d4:68:54:94:ce:65:71:6c:53:b0:
1e:72:e5:85:5d:18:eb:f5:d3:98:f3:2b:04:bc:04:
bb:2a:53:f0:5b:b2:c3:d0:35:0a:7d:b4:6b:0c:8a:
2e:6d:53:15:4b:cc:c4:da:6e:59:fd:ec:83:eb:5e:
b4:ae:e0:62:7e:9f:6d:aa:f0:31:8c:bf:d9:29:83:
2e:85:c3:f8:08:c2:63:d1:f8:8d:e9:24:c9:e2:33:
0a:9e:0e:7c:06:02:cb:bf:07:d1:25:63:c1:ac:c8:
33:92:df:85:28:ea:99:f8:1a:85:ee:46:66:70:f8:
46:a8:60:95:5e:ce:21:e4:9d:d8:d7:c6:cc:86:9a:
17:d4:66:2f:3d:a9:53:b1:04:68:9c:15:b3:01:03:
92:c3:2e:0b:fa:77:7c:cf:75:ac:5d:09:fa:8e:4f:
cc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17979
sbgp-ipAddrBlock: critical
IPv4:
103.83.168.0/22
203.89.112.0/22
IPv6:
2400:9440::/32
Signature Algorithm: sha256WithRSAEncryption
2e:64:d3:4b:a9:b1:1b:22:65:40:5d:bf:a3:a8:fa:3b:f8:3d:
27:b5:2e:f4:55:48:52:47:23:ac:27:de:d1:06:2f:46:bf:45:
11:0f:9d:18:a3:e1:c3:c0:a2:e6:50:f9:6c:30:c9:46:7e:cb:
96:d7:bb:ad:d3:3a:94:e3:e3:84:92:77:20:df:4d:07:66:a9:
dd:76:91:1b:72:58:7d:3d:46:15:f2:0d:96:f2:fe:6c:a9:74:
39:98:c8:76:3f:18:1d:b6:8e:3a:d9:ca:5b:db:1b:33:5f:52:
02:8b:d3:c1:1f:79:7c:60:34:5b:c7:ab:1f:36:f6:68:79:4a:
15:a0:50:de:29:a6:eb:9e:95:d7:28:62:07:e3:f3:88:55:72:
24:40:6c:d6:6e:3d:26:33:c9:55:d2:da:30:74:a5:31:d5:5d:
13:79:5f:5b:ec:08:ff:04:61:fb:42:22:67:20:f0:58:cf:e3:
5f:69:d6:bf:cb:f9:20:0f:55:31:b3:39:6d:79:67:d5:88:3d:
04:27:79:20:e3:53:af:18:e1:50:54:09:1d:be:24:a7:18:34:
4c:80:c0:4d:e7:e5:d7:f0:46:cd:5c:d7:33:7f:d3:71:5d:c2:
35:02:2d:3d:22:cb:31:07:2f:e7:46:46:d3:43:98:d8:34:1f:
c4:ca:87:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:47:06 2026 by rpki-client