Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer
File: Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer (raw, json)
Hash identifier: Z/ni6OZbxXwdicpznJKzjKqgz0sufZiSHIgWbsNF0b4=
Subject key identifier: 16:8D:67:D8:E5:25:89:8B:FD:0D:DF:2E:F7:CC:41:B8:9E:B9:3C:4E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AB1E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Apr 2026 14:31:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 134110
IP: 103.53.148.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174878 (0x2ab1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 8 14:31:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91C8BAB, serialNumber=168D67D8E525898BFD0DDF2EF7CC41B89EB93C4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:82:3e:37:59:dd:8b:a9:dc:f5:93:d5:24:f2:
f1:cd:5f:c2:93:1a:3d:68:56:f3:cd:b4:7b:e2:90:
c4:58:45:86:4f:46:81:5a:e5:25:09:2f:1f:a6:d4:
07:71:b7:4e:2a:87:ec:72:11:ca:96:3b:a1:71:3a:
1c:2c:32:3c:05:b6:da:0c:8d:c8:28:36:9e:1f:b5:
0a:82:67:b3:4c:bf:37:d1:a1:74:51:38:02:a1:ac:
27:d0:7f:7f:76:7d:ca:14:a2:12:05:65:fc:a2:83:
64:f7:3f:d3:9b:ae:63:86:3d:53:e8:cc:93:3e:f4:
fd:e8:86:a0:c8:5f:da:6e:07:81:19:11:b6:96:17:
b7:93:82:93:56:3c:c7:38:f1:6a:e5:46:01:05:59:
55:35:db:a5:a5:5f:52:43:6c:83:a7:e3:15:b3:dd:
b0:4b:f4:f4:fd:d7:d0:89:bb:24:ae:af:dd:d9:b7:
73:89:8b:14:81:a9:04:e4:73:9e:2c:6a:6e:15:90:
53:0f:62:b3:b5:1f:f0:51:14:4d:c3:f9:5d:1a:f0:
61:54:e4:6e:48:fb:07:22:1b:dc:46:88:c0:e7:06:
e1:9e:b6:28:76:98:49:2c:04:5b:3c:1a:18:94:96:
94:43:7e:80:90:95:14:b0:dc:6f:3f:b9:84:7c:e8:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8D:67:D8:E5:25:89:8B:FD:0D:DF:2E:F7:CC:41:B8:9E:B9:3C:4E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134110
sbgp-ipAddrBlock: critical
IPv4:
103.53.148.0/22
Signature Algorithm: sha256WithRSAEncryption
49:6a:9d:35:52:4a:cb:82:4e:5c:da:91:39:5a:2a:a0:bf:6c:
3a:78:e6:da:39:9a:a4:21:5a:f5:0c:d9:60:65:89:05:14:b3:
96:c6:ea:59:5d:74:37:c5:1c:c2:51:c0:00:02:44:ff:0c:a1:
95:e7:60:f6:ba:b0:1a:42:f7:81:18:a5:4f:66:d9:68:84:c3:
55:45:6a:dd:89:ce:b9:52:d8:8a:9d:c4:1b:5c:53:04:39:84:
e6:3e:43:78:9d:81:32:7a:6a:d8:02:02:b5:88:0e:7b:e4:0a:
b5:81:e4:54:26:93:e1:3c:14:9a:13:e1:a8:04:df:b0:c2:82:
db:e8:47:f3:bd:1c:6c:c9:58:29:8c:45:d4:5b:d1:c2:99:87:
1d:bf:f5:fa:91:48:c1:c4:03:44:e6:f1:37:c1:c3:6f:c5:d5:
98:b7:3f:f9:c1:dd:94:4b:4e:be:52:26:08:63:74:0a:1b:37:
fc:6b:86:84:af:cd:d9:a1:a0:f2:5d:67:2c:b7:0c:7f:c9:2f:
fa:3c:0b:f8:df:00:9c:1e:b4:9b:f3:5b:1d:65:fd:57:47:10:
ad:11:d7:e2:2f:da:69:95:b7:8a:8a:37:80:46:e5:1e:c2:b7:
67:54:1a:94:b1:7c:97:72:ca:83:6a:70:11:77:90:56:a2:b1:
ea:60:bf:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:22:39 2026 by rpki-client