Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer
File: S9XCMYZ-JzlRVcAceEizsByGBvI.cer (raw, json)
Hash identifier: NGEPBBpxohL1quhfcrtZhwT7rz5exWtYH3ohl9do42g=
Subject key identifier: 4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0296A2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:30:50 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 149491
IP: 103.181.24.0/23
IP: 2400:5760::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169634 (0x296a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:30:50 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A914BBE1, serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b3:c3:13:56:8f:3e:19:b9:4a:e3:85:2f:45:
31:c5:13:04:f0:a8:a9:e5:9c:dc:4e:ce:a6:92:0d:
5e:e5:23:0c:69:59:7c:1e:ee:bd:d7:7d:87:2d:33:
2a:fb:2d:a5:01:b3:60:e0:00:ca:bb:c1:b2:aa:e9:
89:b9:2e:c1:de:cc:51:5a:2d:b9:d2:9a:b6:ef:da:
21:d4:ad:2c:c4:2a:0a:ac:3b:14:4f:f7:3c:a7:af:
9d:23:5c:2c:29:5b:03:d8:01:ee:e1:a0:d8:88:1f:
08:d9:fd:e2:32:e1:a1:c4:68:ea:6b:b0:ae:5b:e5:
4d:2c:7e:4f:ca:27:20:d3:b9:0f:70:a4:de:d1:13:
dd:a7:2f:4f:de:91:7f:e3:51:d1:cf:86:85:92:59:
f4:e3:b4:b6:c5:67:09:18:f7:4d:56:31:34:3b:13:
73:b4:b2:be:5c:c4:f9:ad:cc:fe:e3:55:e2:c9:72:
35:ed:64:9c:9a:c3:f3:de:fe:32:9e:db:e3:b5:d3:
f7:78:04:f8:b2:c1:da:01:84:f4:26:c3:4b:7b:01:
98:78:4c:2b:88:17:08:30:c4:5b:8c:a6:fb:75:e1:
1f:f3:cd:23:54:1e:4f:63:0c:76:ec:30:f0:9d:a7:
62:c3:2e:da:48:40:be:73:db:d8:1f:29:cf:b2:51:
13:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149491
sbgp-ipAddrBlock: critical
IPv4:
103.181.24.0/23
IPv6:
2400:5760::/32
Signature Algorithm: sha256WithRSAEncryption
d5:db:bb:b6:c2:15:a5:13:73:84:87:c9:a6:2f:3d:58:69:ef:
7b:aa:df:8c:bf:44:5c:85:da:5f:08:7f:6a:63:fe:8d:f5:ea:
c4:d6:ac:fd:18:16:34:2a:5d:d4:0b:03:23:3d:1d:6c:2f:19:
c1:10:d5:c1:19:6e:19:f4:33:97:ab:2e:1c:33:4f:76:dd:d5:
0c:49:70:38:cd:40:4a:b9:ea:63:cb:d7:f5:63:1c:10:a5:14:
5d:42:ce:8d:f9:07:14:a1:8a:30:4f:5b:a9:3b:b5:d5:22:d4:
04:42:67:ce:b2:62:5a:93:2e:1d:3b:c6:7e:c4:be:a0:ff:8e:
b6:13:1f:46:8f:49:f7:c6:9f:e9:4a:38:af:be:df:22:f2:5b:
74:4f:ec:47:cb:14:b0:5e:27:66:8b:6c:3a:40:e8:09:7c:a3:
ad:1e:29:28:d2:67:dd:37:0b:3d:f9:08:05:db:ff:e7:0a:58:
ab:4e:68:c2:34:bb:80:e0:57:4f:8e:fa:ea:b2:79:33:00:e7:
a4:ee:73:3f:94:0e:b4:e2:04:b4:27:a6:88:1d:1c:fd:e1:b0:
83:ef:16:ee:d2:0a:fe:10:0c:6f:23:03:b7:25:74:4c:05:c2:
79:cd:51:7d:f2:b1:97:c7:55:88:ac:84:c1:38:b2:44:8f:8b:
64:45:0e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:07:58 2026 by rpki-client