Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
File: T96UkP8v8-m_k7SY108x916p_P8.cer (raw, json)
Hash identifier: h7V5+MmgcUNZB3qaF9xN+6R+Yz/M5FRI3CO0dpYCPjU=
Subject key identifier: 4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D53F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 10 Sep 2026 12:35:13 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 138161
IP: 103.121.192.0/23
IP: 2001:df6:5100::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185663 (0x2d53f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 10 12:35:13 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A912D14B, serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:9c:7f:48:8b:96:ab:8c:5a:46:09:0b:f3:
9d:ae:51:00:56:ba:97:59:e5:31:dc:f4:bc:16:72:
40:b9:ed:ae:68:e0:7f:9b:ef:1b:54:4b:19:4d:f4:
6a:31:29:f0:bc:18:c5:88:c7:49:67:33:ba:44:50:
40:3e:43:13:7c:41:1e:30:5b:54:d9:83:47:08:f5:
92:37:28:be:27:dc:40:11:66:b5:af:a0:88:c1:8f:
96:28:79:92:68:dd:c5:7a:c0:7c:54:0c:14:c5:79:
a6:fd:f8:02:5d:d6:9b:e9:07:57:4d:9d:ba:ab:dd:
c3:56:ea:ae:c5:02:dd:a8:a0:43:33:c7:d9:a4:34:
82:ad:4d:0d:b4:e4:14:30:36:30:ac:c6:26:38:51:
d8:f1:82:0c:fd:17:af:25:64:3e:37:30:89:50:47:
03:59:cd:5f:61:3a:3b:40:fb:12:e9:72:70:de:fd:
d1:f2:09:24:77:59:f6:80:7a:81:72:4c:23:c9:ed:
01:24:dc:e0:66:f1:df:01:a5:9f:ce:6b:c7:9a:73:
4d:e7:c4:77:70:d7:4a:f4:b0:dd:f0:27:14:c7:7e:
49:ec:d3:dc:d5:19:19:2b:3f:be:37:e3:78:a3:38:
fa:11:48:81:e8:bb:26:5f:fe:84:6e:ce:0a:54:0f:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138161
sbgp-ipAddrBlock: critical
IPv4:
103.121.192.0/23
IPv6:
2001:df6:5100::/48
Signature Algorithm: sha256WithRSAEncryption
86:3a:31:3b:70:84:34:2e:5f:90:2b:bf:fa:e5:db:08:2f:a8:
b6:fa:34:db:51:a9:7b:02:fe:81:3f:a6:1b:98:e0:6f:9d:70:
e9:82:fe:e8:42:b3:99:3a:64:f9:45:70:76:65:1e:b6:34:de:
19:55:5b:3a:ab:ad:7d:f9:61:03:55:91:62:9d:b9:7f:bd:54:
58:69:db:d7:46:2f:28:01:0f:49:69:77:31:7a:77:5d:c0:51:
ed:11:ad:93:5f:8f:a2:e3:8d:70:bc:21:b7:0c:90:67:b2:18:
64:6c:ae:83:7c:ab:cb:2e:69:45:91:4e:32:ac:df:8c:2d:0f:
89:d4:2d:60:e0:e4:6e:08:0f:37:b2:e2:28:5c:ff:4e:37:e6:
79:f8:0d:7c:e4:3c:2a:1c:25:af:a3:e5:d1:90:45:b9:ae:fd:
9a:a2:85:94:78:a8:70:5c:39:23:a6:2c:40:60:ad:f5:88:1a:
ac:b8:7d:2f:2b:c1:34:7a:0c:cb:cf:a2:c5:70:b4:0f:c4:1e:
f0:33:61:66:a3:9c:a8:11:aa:e8:37:fe:cf:00:38:e5:79:eb:
41:a0:47:6d:e3:d9:51:a6:82:4c:8b:35:98:cf:83:fa:1c:7d:
3d:6f:46:96:4b:4b:2d:fd:a7:41:7a:ca:94:56:0a:ca:b8:53:
1d:f6:6d:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:33:39 2026 by rpki-client