Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
File: JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer (raw, json)
Hash identifier: P1V9uNaR9E1iQ/X/iEpFCfc4XLH8IuZDLDeJ/31lgN4=
Subject key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B73C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 26 May 2026 19:22:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 137532
IP: 103.112.64.0/23
IP: 2405:e6c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177980 (0x2b73c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 26 19:22:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:50:24:c4:da:58:5c:37:56:97:60:b6:98:
bf:05:06:ea:e7:a7:59:e6:4e:47:a4:6f:60:1b:ef:
d2:32:bf:75:67:ba:7f:04:e1:0f:c8:58:59:73:3b:
c6:c4:0f:ed:36:9a:44:03:d4:03:5e:d5:2f:6c:09:
76:d4:86:83:e4:2a:37:89:f8:50:d0:53:01:61:d8:
81:67:16:f2:64:7f:ad:cd:aa:4d:2c:0c:24:98:ba:
25:65:b9:60:f4:fe:c9:0d:3e:2d:fd:ca:9a:97:49:
f4:42:a9:26:3e:ca:69:25:f2:17:2e:d4:ef:49:63:
33:e3:58:54:40:67:30:14:c6:7a:84:f8:2a:7e:ac:
71:d7:05:8a:4b:49:bb:04:5a:5e:84:fb:b1:8a:40:
f4:bc:00:a3:eb:f2:be:01:5d:ce:8b:ca:f8:7b:05:
3c:b6:63:d9:2d:7a:7e:44:3e:e0:17:5f:ff:6c:d0:
97:af:ed:e6:7b:05:f2:0d:35:91:ef:de:84:94:84:
ea:1d:c5:a6:06:9f:44:cd:0b:d3:b1:94:2f:2a:59:
1f:78:0f:64:fa:e7:6a:33:3c:8f:88:ad:1c:02:a0:
cb:72:78:4f:d6:59:d6:ee:02:b2:d5:1c:82:87:66:
f1:2d:c6:81:0e:f3:1f:01:2f:fe:c9:28:91:5e:ba:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137532
sbgp-ipAddrBlock: critical
IPv4:
103.112.64.0/23
IPv6:
2405:e6c0::/32
Signature Algorithm: sha256WithRSAEncryption
93:87:a3:94:4e:83:d3:1e:78:3a:d0:a7:4d:23:4d:33:90:ee:
ed:32:4b:8f:c8:b2:ef:14:e1:24:3c:25:a6:50:29:16:7f:55:
2a:9b:51:a8:6e:ea:b1:07:7c:ab:54:cc:8c:1f:18:15:c8:ad:
a1:cd:10:95:52:c8:53:5f:4b:be:be:0d:06:a0:11:c0:ea:48:
02:4b:3e:e9:5e:25:cf:6e:a0:df:b9:a4:bd:b2:a7:33:c5:25:
7c:22:c3:72:c6:eb:be:5b:52:a2:be:57:5e:35:68:3d:cc:9c:
ad:8d:bf:67:e2:92:db:76:be:dd:46:51:04:dc:db:44:68:c1:
43:e5:d3:3b:8c:6f:d5:03:69:55:4c:a9:d3:30:98:c9:8d:08:
07:14:43:59:11:ea:61:6b:5b:3b:4d:65:50:70:70:81:b2:4a:
bc:c5:2c:cc:d0:ef:ee:46:0d:fc:ff:e5:c5:90:3d:6c:5e:5e:
be:52:6f:ce:6d:1d:da:cf:96:49:b9:e8:39:4e:da:19:dc:b8:
cd:15:96:19:4e:09:15:9d:6f:68:b3:05:1f:9f:db:ac:0c:0e:
34:de:56:23:f3:39:5c:0c:f8:37:66:bc:6d:c1:5f:21:ed:9b:
b2:6b:d2:48:99:25:55:91:66:2f:2b:a9:dc:37:81:ae:98:3b:
a6:e9:1f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:56:18 2026 by rpki-client