Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JRiNYKv1gleStK_K1bK06Xj6rjA.cer
File: JRiNYKv1gleStK_K1bK06Xj6rjA.cer (raw, json)
Hash identifier: +Chl9gfltVD88rBF3G7PO8ARCczsqjuSLrSUmrkYp9M=
Subject key identifier: 25:18:8D:60:AB:F5:82:57:92:B4:AF:CA:D5:B2:B4:E9:78:FA:AE:30
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CE38
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/JRiNYKv1gleStK_K1bK06Xj6rjA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 18 Aug 2026 14:00:31 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 136440
IP: 203.13.231.0/24
IP: 2001:df6:240::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183864 (0x2ce38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 18 14:00:31 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91C61F3, serialNumber=25188D60ABF5825792B4AFCAD5B2B4E978FAAE30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:b0:91:c0:96:1b:7b:ee:86:49:26:d1:db:
c6:5a:3c:b4:b5:89:ca:52:26:0c:f3:e7:cd:ae:91:
20:d8:1a:f8:e1:6f:2e:60:57:39:b9:7e:a2:b7:0b:
d9:cb:1a:da:7a:5b:36:5e:6f:31:f5:ae:5b:e8:e2:
38:f7:6d:64:f9:2e:a2:36:a3:9d:1d:dd:da:53:6b:
9a:92:62:29:1a:fd:96:79:10:06:83:d6:6f:d9:c1:
8c:9a:11:3d:f1:ce:b8:bf:38:8d:27:cf:98:4f:6f:
da:68:c9:31:e3:7b:79:f4:a3:79:a0:53:c3:d7:fa:
65:85:01:c4:06:36:92:1a:d5:87:ea:6c:8f:43:66:
9f:f7:93:7d:cc:77:98:8c:03:df:b2:a5:cd:67:a6:
be:cd:0d:ac:3e:6e:47:80:4c:62:fb:c2:e7:ac:2b:
b2:c5:8d:14:66:ca:5d:aa:58:d1:d4:20:fa:6b:b5:
c9:6a:0b:8e:b7:b6:9c:e9:af:95:62:a6:2a:55:01:
f2:40:55:1c:0d:4b:da:7e:8c:3f:dc:b7:4d:b0:77:
c0:f2:57:7e:eb:f5:e1:a9:27:bb:eb:24:e6:18:ab:
a5:f4:35:1e:47:76:a9:4e:70:4e:09:e1:a6:99:b7:
7a:cf:44:05:75:a6:b0:cf:ef:2d:ae:f7:ff:3d:8d:
82:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:18:8D:60:AB:F5:82:57:92:B4:AF:CA:D5:B2:B4:E9:78:FA:AE:30
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C61F3/308E811E219211F18944AACE0D3D8C67/JRiNYKv1gleStK_K1bK06Xj6rjA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136440
sbgp-ipAddrBlock: critical
IPv4:
203.13.231.0/24
IPv6:
2001:df6:240::/48
Signature Algorithm: sha256WithRSAEncryption
12:1c:d1:ec:54:af:4a:a5:18:4d:11:44:5e:71:60:f6:31:cb:
a8:17:21:00:ea:e5:28:1d:96:71:de:3d:43:88:39:59:af:38:
8e:ac:ac:42:72:8b:ca:a6:e4:89:38:30:3b:26:c3:16:e3:df:
95:4a:9f:b7:45:00:29:06:b4:f2:14:16:de:1b:4a:c9:de:51:
0c:a7:b2:f1:73:a7:bf:09:77:04:a8:ce:de:04:77:31:3f:09:
43:7e:5c:62:c2:6c:0b:f9:36:b7:8b:f7:70:2f:9f:63:00:40:
fa:19:1a:3f:72:49:99:9d:88:bb:41:7b:ea:55:38:ce:22:ba:
96:7e:2a:df:68:d0:70:83:38:d7:44:66:07:c4:bf:11:ec:90:
c7:d1:2d:9a:60:f1:9e:2c:cd:3d:87:4b:74:47:ed:15:71:c8:
f4:75:9b:89:55:1f:27:6a:d8:96:24:0a:6b:22:7c:92:b2:04:
6a:64:36:21:75:81:8a:8e:82:8f:b0:99:47:dc:f5:0c:15:90:
ab:de:e0:b3:b8:c9:6e:68:4d:cc:90:86:cd:00:13:5f:d5:03:
56:23:a6:8d:22:64:2f:39:3b:df:3d:23:d0:db:89:99:ea:a2:
6e:dd:0c:7d:e4:3f:bf:7e:39:89:ef:6a:d4:25:9b:3d:81:ac:
28:51:94:50
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:21:32 2026 by rpki-client