Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer
File: FOvueS5AUhzVGx8DIDp_jiq7EtI.cer (raw, json)
Hash identifier: 1YDXvmNnbNjFybnUyQEjEAsN6RHWcnDQZv6MEqIAXiU=
Subject key identifier: 14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029261
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:09:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 134837
IP: 103.149.186.0/23
IP: 2001:df3:3780::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168545 (0x29261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:09:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A912F40E, serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:09:83:16:00:48:14:19:34:30:da:80:0c:
20:3c:f8:56:39:86:1d:73:e4:e4:4b:0e:e4:51:e9:
9e:07:5d:ac:48:32:78:b7:3a:eb:88:b8:79:28:cb:
28:e5:43:07:5c:1b:10:0a:df:8a:b6:00:f4:36:e1:
af:77:1d:ec:2d:d1:43:c2:4b:74:fb:7e:b3:85:91:
44:0e:34:b3:e3:43:8e:20:1d:6c:43:6c:06:aa:e7:
bb:79:30:63:fa:9a:91:55:4a:d3:44:6d:0c:e7:30:
de:07:03:1e:36:62:a1:30:90:5d:26:07:c2:06:ee:
ee:27:86:f8:08:87:09:51:72:a4:38:c0:6f:e2:ae:
13:a2:b0:19:1a:00:59:06:4a:e5:e5:f7:cb:f4:cf:
86:a2:0c:17:66:7b:45:17:e7:a3:c0:e5:1b:4a:34:
2a:6b:6c:4d:86:42:d8:c6:65:f7:dd:55:68:cc:f1:
75:78:d4:92:21:63:b4:d9:ac:a2:fb:de:3d:3d:a0:
44:91:c7:f9:8e:cc:9e:82:2a:23:97:cc:43:60:9e:
3f:ba:84:ad:fe:95:75:dd:6b:25:9b:75:ab:3c:bc:
a6:9d:e6:77:04:13:07:eb:6c:cf:49:93:a8:12:1a:
5c:99:46:4c:08:5e:94:68:86:07:64:cb:42:b4:dd:
f5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134837
sbgp-ipAddrBlock: critical
IPv4:
103.149.186.0/23
IPv6:
2001:df3:3780::/48
Signature Algorithm: sha256WithRSAEncryption
d5:6c:ed:bb:a4:c8:3f:60:1a:4c:53:df:19:a3:97:75:5f:87:
8c:48:9b:87:c2:5a:ab:13:8b:cc:db:f6:ee:15:57:f5:76:26:
bd:a4:fb:1d:61:ad:c6:85:16:e2:32:1a:1a:ab:00:92:c2:17:
c1:56:0b:4e:ac:38:2b:be:34:4b:b7:ad:b5:4e:a2:51:c3:f5:
19:55:3b:f8:29:ae:02:10:8c:33:f0:90:8e:63:a1:e3:25:17:
74:f3:a1:c1:50:c3:6e:01:05:22:e3:f5:28:6d:b6:7d:32:d8:
ec:23:4a:5d:1d:12:13:26:ca:c0:5e:30:a6:55:4d:38:32:c8:
53:6c:b4:de:e2:fc:ca:d4:97:d7:08:e9:20:f9:40:9b:43:07:
43:2c:80:a8:26:42:1e:99:61:4e:f2:c1:5e:05:e3:83:c0:b0:
8f:dd:da:8d:65:62:18:8a:ae:0e:9b:6c:51:4d:cc:33:e6:c9:
39:f0:b6:a8:ef:3e:c2:9f:1e:85:c5:99:86:55:c8:98:3b:a1:
71:6f:19:b9:9e:6f:63:8d:0c:6b:98:87:65:96:c7:e3:d9:0f:
91:c1:ac:5e:05:96:ec:76:4d:64:9c:97:14:9f:bc:e3:99:ca:
49:0f:ee:da:5b:aa:fa:8b:80:aa:d1:01:04:89:81:f3:9b:de:
63:26:2e:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:00:01 2026 by rpki-client