Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfzCC3gzseILvBM0UQqTrh1obMA.cer
File: JfzCC3gzseILvBM0UQqTrh1obMA.cer (raw, json)
Hash identifier: pwU4xUsGvwLh8RTDV6oAUrqJU/LiNkbMl0d8qit4Q4Y=
Subject key identifier: 25:FC:C2:0B:78:33:B1:E2:0B:BC:13:34:51:0A:93:AE:1D:68:6C:C0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D477
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 08 Sep 2026 02:17:28 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 139593
IP: 103.186.238.0/23
IP: 2400:75e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185463 (0x2d477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 8 02:17:28 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A918AA54, serialNumber=25FCC20B7833B1E20BBC1334510A93AE1D686CC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:06:7a:0a:df:a9:e0:9d:6b:4a:ad:84:62:
19:49:71:94:fe:3a:de:5d:35:7e:ab:18:a4:5e:3d:
98:e9:82:58:09:e2:91:5a:71:75:ea:a1:a4:ee:8e:
f0:49:85:2c:80:94:d1:09:e2:e3:0e:69:60:e7:41:
fe:bd:b6:34:60:0c:18:59:eb:79:9c:a5:98:77:5c:
10:0c:05:c0:2b:d9:7d:1f:1a:42:a4:f1:cc:58:c2:
29:1c:6f:f4:b3:df:99:cd:0a:a8:de:ed:d9:8a:44:
22:21:93:de:81:8d:14:67:9d:69:90:22:7e:dd:1f:
c7:89:cf:1d:0d:16:c5:00:33:24:f4:20:72:44:3b:
53:20:ef:00:c6:ef:55:8a:50:50:56:24:8c:78:d4:
7f:b2:df:14:37:07:4c:19:c8:57:30:b3:b8:64:bd:
f6:d4:8d:c1:3e:7c:a9:85:d9:88:38:bc:a9:bc:0d:
3b:b2:14:d0:26:2c:23:02:cc:4b:4a:6b:7f:20:5b:
7b:27:7e:11:e8:da:23:e0:fc:53:47:67:4f:db:bd:
29:42:dd:cb:bc:bf:5a:c7:f5:e7:e5:85:34:3f:da:
b6:10:cb:2d:4b:83:c6:e2:c9:08:2a:74:00:dd:72:
74:96:77:7b:14:4a:5c:52:e2:f7:bf:c8:63:8c:1f:
6f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FC:C2:0B:78:33:B1:E2:0B:BC:13:34:51:0A:93:AE:1D:68:6C:C0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139593
sbgp-ipAddrBlock: critical
IPv4:
103.186.238.0/23
IPv6:
2400:75e0::/32
Signature Algorithm: sha256WithRSAEncryption
40:6e:07:88:3f:e3:dd:12:23:d9:5f:c0:7d:59:c2:0e:30:df:
67:02:e0:9b:fb:9e:f8:bd:49:4c:3f:34:cf:b4:be:fc:6e:12:
e0:28:b6:5a:ea:3c:5a:9c:2e:24:0a:40:b3:82:c0:7b:da:ef:
7d:21:0d:f9:94:f9:d1:b9:57:52:c3:52:e2:1f:23:37:16:81:
d6:ff:f3:8c:bc:95:2f:2d:4b:d4:95:62:34:24:30:c7:d8:91:
58:7c:18:8b:e4:bf:95:fa:60:f3:b2:78:87:81:04:2a:ba:6f:
25:c6:81:af:95:02:5e:38:24:13:6a:47:4d:ed:c9:c1:eb:f9:
de:ef:a3:19:ce:37:b3:cc:08:ff:0b:bc:d0:9f:66:8a:ab:97:
31:d7:b1:cf:29:dd:6d:9c:5d:41:e6:1a:ac:a0:21:5e:88:f6:
20:27:f6:53:ec:5c:4b:f4:85:e7:c8:ff:d6:8c:aa:85:d2:91:
f8:4f:1d:4a:4c:6b:44:8b:9f:3f:d5:e7:eb:be:84:e1:c3:fa:
9f:15:1b:22:c5:0c:74:ab:7d:b7:00:fd:57:56:64:df:00:18:
4b:95:07:e9:15:33:a9:88:fe:36:6c:f4:88:d9:68:40:d4:a3:
fd:7e:e0:60:f0:d3:61:25:68:33:c5:8c:56:ea:93:33:55:e0:
6b:fa:77:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:29:34 2026 by rpki-client