Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
File: MFikabZ9AwcsLYo4Xp8qq7oTTis.cer (raw, json)
Hash identifier: 6qGdyAwESQQ0sx1RvCFIkJzmZmESlN6ph8Ys0/xCjHI=
Subject key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A103
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 01 Mar 2026 14:54:29 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 134121
IP: 103.226.124.0/22
IP: 103.242.0.0/22
IP: 150.129.80.0/22
IP: 2400:be80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172291 (0x2a103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 1 14:54:29 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91F9665, serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:20:e0:86:d9:1f:c6:91:63:81:bd:0f:04:
1e:d7:8d:a4:22:b9:67:87:fa:67:1c:57:54:9d:3a:
fb:cc:cb:2a:dc:fb:69:0c:49:ca:c5:81:16:d1:3b:
77:f1:07:4b:71:95:c4:c7:61:32:2c:b3:ca:e2:9f:
a2:29:04:d0:47:aa:d0:a8:42:80:b9:01:a3:1a:f2:
35:ea:ba:1f:b4:79:4f:a0:f0:51:95:1e:97:45:27:
64:38:43:28:d6:d5:5e:3a:6e:d1:cc:a5:32:da:c1:
20:c8:78:19:ea:d5:4e:df:5b:8a:27:a8:f0:8e:4d:
bc:8c:03:78:f8:cd:a1:d3:6b:b0:8f:68:73:c0:40:
18:4f:13:7e:7a:9b:9c:1a:06:42:d3:9e:43:45:b2:
be:3f:e7:87:3e:d0:27:d0:fc:bb:9c:1d:85:1f:b6:
86:11:19:6b:70:48:29:a3:59:db:a0:70:4d:4b:63:
fe:14:5c:8f:59:cb:b6:72:e4:66:a0:82:58:d8:a9:
38:e0:39:9b:ca:29:00:c9:e6:37:6d:94:1c:31:54:
bf:3a:4f:2b:4e:1f:99:a2:de:75:06:15:60:4f:20:
1c:de:f1:a3:87:fa:4b:34:e6:40:23:6d:6f:09:9d:
bd:9a:87:15:f2:2f:1d:e9:12:1d:94:1b:4b:16:cb:
28:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134121
sbgp-ipAddrBlock: critical
IPv4:
103.226.124.0/22
103.242.0.0/22
150.129.80.0/22
IPv6:
2400:be80::/32
Signature Algorithm: sha256WithRSAEncryption
33:2d:84:de:09:ed:9c:25:1c:a7:3f:fc:d6:be:94:87:54:e8:
15:b5:16:98:93:21:d6:c2:5a:34:bd:25:d5:6d:8c:70:0e:05:
d7:e7:21:19:c3:9e:8c:d3:d1:95:6e:5d:ae:7d:09:5e:8d:af:
87:6f:0f:79:96:51:29:2c:68:dd:5e:03:06:bc:fb:2f:a2:22:
93:b5:bf:d6:a5:18:ff:0d:ed:f1:4c:1e:4a:42:4c:6e:25:36:
bd:98:ff:60:3b:02:ad:11:52:cd:30:e1:5c:a7:78:11:3f:94:
aa:04:bd:61:e9:c3:1b:37:4d:f6:53:35:c4:fc:b7:6d:56:95:
3f:f7:d2:74:fe:9f:36:76:53:d2:ba:97:62:14:84:48:f9:e9:
df:9b:12:7d:cc:14:ef:dd:95:04:d3:06:6a:16:f4:db:92:82:
8f:b8:ab:62:d9:36:44:7c:6b:ed:3e:c5:ba:1e:a3:0d:ba:aa:
c3:1b:a5:a5:ca:fb:7a:45:f3:1f:a4:7f:37:b7:c0:6d:b9:58:
40:ea:be:a4:c1:ea:8c:d6:0a:a4:ce:f5:38:68:00:32:b6:8f:
6e:81:db:f5:47:d2:ea:a6:e2:ff:f7:65:2b:93:8d:a0:62:34:
f7:1d:f2:8b:89:59:03:6a:d9:cb:c6:b6:2e:15:ec:fc:14:2e:
ef:10:66:d5
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIDAqEDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMwMTE0NTQyOVoXDTI3MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjk2NjUxMTAvBgNVBAUTKDMwNThBNDY5QjY3RDAzMDcyQzJEOEEz
ODVFOUYyQUFCQkExMzRFMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDOiDghtkfxpFjgb0PBB7XjaQiuWeH+mccV1SdOvvMyyrc+2kMScrFgRbRO3fx
B0txlcTHYTIss8rin6IpBNBHqtCoQoC5AaMa8jXquh+0eU+g8FGVHpdFJ2Q4QyjW
1V46btHMpTLawSDIeBnq1U7fW4onqPCOTbyMA3j4zaHTa7CPaHPAQBhPE356m5wa
BkLTnkNFsr4/54c+0CfQ/LucHYUftoYRGWtwSCmjWdugcE1LY/4UXI9Zy7Zy5Gag
gljYqTjgOZvKKQDJ5jdtlBwxVL86TytOH5mi3nUGFWBPIBze8aOH+ks05kAjbW8J
nb2ahxXyLx3pEh2UG0sWyyj/AgMBAAGjggMqMIIDJjAdBgNVHQ4EFgQUMFikabZ9
AwcsLYo4Xp8qq7oTTiswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY5NjY1LzZEMEQxMkI4NEJGNTExRUJCRDgzQjg3QkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGOTY2NS82RDBEMTJCODRCRjUxMUVCQkQ4M0I4N0JDNEY5QUUwMi9NRmlrYWJa
OUF3Y3NMWW80WHA4cXE3b1RUaXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgvpMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCZ+J8AwQCZ/IA
AwQCloFQMA0EAgACMAcDBQAkAL6AMA0GCSqGSIb3DQEBCwUAA4IBAQAzLYTeCe2c
JRynP/zWvpSHVOgVtRaYkyHWwlo0vSXVbYxwDgXX5yEZw56M09GVbl2ufQleja+H
bw95llEpLGjdXgMGvPsvoiKTtb/WpRj/De3xTB5KQkxuJTa9mP9gOwKtEVLNMOFc
p3gRP5SqBL1h6cMbN032UzXE/LdtVpU/99J0/p82dlPSupdiFIRI+enfmxJ9zBTv
3ZUE0wZqFvTbkoKPuKti2TZEfGvtPsW6HqMNuqrDG6Wlyvt6RfMfpH83t8BtuVhA
6r6kweqM1gqkzvU4aAAyto9ugdv1R9LqpuL/92Urk42gYjT3HfKLiVkDatnLxrYu
Fez8FC7vEGbV
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:43 2026 by rpki-client