Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer
File: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer (raw, json)
Hash identifier: Oi56GmTnH6E1cY8mOqFY8ptCUzMYd0Rs6bE748X2ERo=
Subject key identifier: 03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02ACC0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 15 Apr 2026 12:31:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 137510
IP: 103.111.72.0/22
IP: 2402:97c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175296 (0x2acc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 15 12:31:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A911FA99, serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:84:25:ea:3b:c4:78:cc:6a:34:5f:51:8b:
99:d0:ff:ea:02:dd:9a:70:36:9e:21:4a:be:81:f7:
ef:7b:b7:19:61:06:7d:71:bc:43:7f:9c:09:ee:62:
05:6b:81:00:f5:04:32:fa:45:74:26:be:a6:36:ea:
a7:3d:ba:7e:ee:b3:83:26:a8:22:30:ae:3e:00:dd:
ee:f7:7a:77:25:16:3c:46:06:42:26:57:d8:21:a4:
02:96:28:f4:fc:b3:95:62:9d:18:5e:d3:e9:84:a2:
7b:44:fa:09:12:30:83:05:54:3b:b9:3f:cb:96:0a:
8e:45:6b:6f:77:19:5e:95:9a:5c:c7:af:c4:ea:40:
34:18:a3:04:24:9b:37:7e:48:e4:20:a9:e3:0f:f7:
1e:14:f8:16:b0:c0:7a:bf:56:cf:72:a1:e5:4b:1f:
b7:98:dc:d0:5d:a2:b7:8e:db:b6:05:53:0d:88:5f:
8d:05:d9:04:30:51:1a:82:5b:0f:99:92:cf:eb:fc:
9b:e2:62:6d:a6:e1:a6:24:e5:32:f4:0c:31:db:bf:
b8:11:d7:43:96:21:35:a0:53:ce:21:c1:c5:1a:61:
00:69:fb:af:c2:35:08:a7:8e:25:b7:07:89:be:01:
d2:6f:6d:fa:b1:db:34:00:b7:01:4e:0e:ca:f7:fb:
60:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137510
sbgp-ipAddrBlock: critical
IPv4:
103.111.72.0/22
IPv6:
2402:97c0::/32
Signature Algorithm: sha256WithRSAEncryption
6c:3f:38:34:60:d0:e7:52:b3:4b:f3:10:1c:7f:a5:58:3f:07:
09:e8:9e:aa:eb:d6:89:3b:33:06:a9:8d:98:6c:7c:09:08:22:
44:04:bc:81:24:b6:fb:fa:b1:78:42:32:a6:63:d9:e9:55:7b:
53:88:d2:a3:62:77:b6:7a:48:c6:63:94:9c:60:cf:bb:b4:51:
82:62:18:61:dc:ad:0a:69:77:f7:57:e6:22:8b:aa:d4:09:d7:
f9:19:c6:fb:d1:59:7d:22:07:d8:a4:5c:7b:45:e8:41:e9:90:
f2:58:d0:11:02:98:de:1a:91:af:11:fd:83:85:b6:c7:e3:d4:
e9:8e:e4:a7:bf:fe:57:ce:8f:37:2a:0a:dd:91:e2:93:97:ce:
52:dc:76:1c:5d:06:3d:b7:48:cd:9b:ab:5c:a9:28:9a:22:39:
4a:63:27:e5:ef:e0:99:34:a2:f8:82:ad:73:4b:a8:04:0f:26:
90:95:79:e4:fe:ce:9a:d5:07:3f:7c:58:12:78:70:5f:73:8b:
e9:1b:e8:07:44:00:0d:21:86:3a:1b:e8:7a:15:0a:d9:d2:fe:
9e:62:a3:e8:0f:82:cf:a4:6e:96:cb:2d:ce:90:79:4e:c8:09:
e8:78:e7:3d:3b:68:5c:15:29:db:7b:cf:e0:b0:d9:46:58:62:
76:fb:2f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:20 2026 by rpki-client