Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
File: Kt1a2PtDrdgNUrtYNpPDG42asuw.cer (raw, json)
Hash identifier: erRVP+eGO8ZKSL1QyfbHkJNpmAdR12VR5ImGkMwaRs8=
Subject key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0297ED
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:37:23 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 137415
IP: 103.107.184.0/24
IP: 2001:df3:e300::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169965 (0x297ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:37:23 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A913149F, serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:dc:d1:da:c4:2e:28:2e:4a:1f:cf:d2:aa:
e2:16:98:9a:eb:19:20:c2:55:29:76:e4:8b:14:c2:
1c:b8:d4:fd:08:ce:8d:48:1d:fb:67:c5:79:56:e0:
cf:d5:ef:d7:98:9f:52:35:c5:bd:d9:9e:12:2c:f8:
64:f9:92:e5:0d:d4:46:a5:6e:46:6d:18:18:97:c7:
7e:38:20:c7:ab:bf:39:38:07:61:2c:e0:b7:9b:3f:
d6:63:d1:14:39:5a:e1:33:01:26:10:83:c8:9a:c4:
e3:db:6f:65:a5:8d:4a:b1:07:ef:c5:89:7e:b7:cf:
26:c6:31:52:05:24:c4:e6:b2:48:4b:dc:2b:90:12:
41:7c:b7:60:03:8e:28:a1:89:84:8d:2f:92:c4:ef:
eb:df:e9:ad:0f:57:1c:33:75:d0:9d:70:4e:1d:e5:
29:08:a0:d6:e7:a0:70:44:22:27:e1:11:ff:fd:d7:
b5:0a:5c:93:cd:e4:03:a0:06:ec:73:93:6b:65:66:
01:0b:f4:33:37:68:ff:ab:a8:8f:ec:08:14:e8:90:
ab:c5:3a:c4:35:9a:88:5b:d1:58:8c:09:ba:ca:53:
5a:e5:52:d2:f0:1b:17:12:45:c5:bc:87:40:68:ed:
ce:f1:cf:70:64:4d:9f:6b:10:e2:4f:89:22:db:52:
e0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137415
sbgp-ipAddrBlock: critical
IPv4:
103.107.184.0/24
IPv6:
2001:df3:e300::/48
Signature Algorithm: sha256WithRSAEncryption
65:62:7e:71:e5:c5:b2:a6:f3:c2:16:49:16:28:ba:cb:25:b8:
18:3b:6b:9e:70:aa:cf:97:c8:e5:69:34:df:fc:30:b2:9e:9c:
26:0a:a7:9c:19:2a:a4:48:fd:99:71:8f:36:65:09:2a:74:d3:
94:cd:0d:06:db:11:04:c6:3e:13:cd:37:a9:33:bc:0c:70:4c:
5c:b1:97:af:e0:23:a2:c9:db:e5:bc:7f:74:09:ab:84:68:00:
ea:88:89:16:d1:88:3d:de:a4:cb:9f:10:54:ee:0f:60:0f:0d:
3f:8f:d9:7e:08:64:66:28:c2:47:59:ec:05:bb:74:13:f0:dd:
49:f5:b8:c5:47:7d:9d:75:90:8d:5e:30:17:a7:23:41:16:44:
b6:9a:6a:5d:d5:ec:b2:de:15:57:eb:11:ff:81:bc:3d:63:92:
10:ba:9f:a4:99:ad:12:3f:a9:af:d4:4c:92:7e:6c:8f:4b:2b:
1a:6c:71:93:dc:f7:f1:97:41:f5:2b:f7:4c:2b:4f:66:9c:dd:
f8:83:56:00:5e:ac:85:ec:e4:17:eb:07:30:0e:94:90:5b:14:
41:b5:7a:c2:15:6a:14:fd:50:9f:0c:cf:c8:78:67:92:52:41:
c6:2b:28:28:7a:d9:76:63:7a:b3:5a:44:d3:da:cc:3d:7a:5a:
70:fa:5e:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:51 2026 by rpki-client