Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer
File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer (raw, json)
Hash identifier: SMjlgS2/Ca/apZZgB+Nm70aeFKblbsgyM5BQSRgziiw=
Subject key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029782
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:35:21 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 139757
IP: 103.144.198.0/23
IP: 2001:df1:d980::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169858 (0x29782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:35:21 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A914CB9F, serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9f:2c:57:d2:31:50:ce:1f:7a:90:1a:56:02:
b7:dc:e5:9d:84:c4:77:88:b1:e1:5f:18:3d:45:60:
1f:01:c5:3c:b3:9e:e7:b8:85:71:40:0d:be:85:ba:
0f:f1:03:ba:41:ab:99:25:0f:54:15:90:c2:e0:9c:
23:2f:71:4a:f8:3b:3b:8d:7d:29:54:7a:af:7d:e6:
53:93:06:d7:13:2c:d3:f1:8f:29:ea:a4:39:0b:d6:
75:3e:20:45:aa:fc:c5:cb:bd:5a:a2:a1:90:12:89:
17:02:c2:d5:62:69:44:91:30:a3:74:6a:e6:24:76:
4b:ed:10:49:bc:bc:00:2b:7c:9e:cc:03:8a:d9:7f:
e3:b3:76:05:11:2b:54:d2:3c:69:34:f9:a2:74:0b:
b0:dd:3b:eb:f2:d7:0e:eb:92:1b:15:ee:61:05:c0:
71:6c:41:b2:72:74:26:c8:e2:3d:c1:a4:55:47:68:
39:49:95:ff:a2:4e:f2:56:9a:a2:d6:83:eb:83:91:
90:09:63:87:26:3c:5c:b2:e9:70:a4:a1:60:60:b8:
28:65:b9:bd:17:b3:de:6d:53:2f:6e:a3:73:ac:56:
17:2f:36:2d:10:e6:e2:9a:8a:20:2d:62:ce:c7:6e:
43:c0:a6:70:f8:e1:c7:90:6a:09:e6:79:29:0c:54:
35:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139757
sbgp-ipAddrBlock: critical
IPv4:
103.144.198.0/23
IPv6:
2001:df1:d980::/48
Signature Algorithm: sha256WithRSAEncryption
98:0c:26:e4:69:21:1e:e9:92:04:80:fb:f4:fc:d9:1a:dc:95:
88:f2:43:ae:bd:b5:c6:db:e6:b9:66:f8:99:f1:d7:d6:48:4f:
09:66:9f:e1:42:1d:f3:38:cf:51:0b:a3:6e:d8:c5:1f:7b:cb:
d1:76:84:ed:cc:50:c3:e9:bd:13:71:83:c6:86:5a:e2:68:0c:
66:4c:47:13:eb:38:2f:a9:b2:93:90:b4:97:92:64:b7:d9:85:
12:47:2e:9d:1b:28:91:22:98:4b:38:f0:b5:91:71:47:3a:69:
12:e9:c6:95:75:a0:c3:c5:44:9a:71:84:4e:78:7e:6c:5c:c0:
1d:57:87:e6:e6:05:81:3f:1a:86:ec:01:d2:36:08:54:bc:44:
6d:1e:f9:ba:87:1c:c4:fb:96:ef:3f:26:d7:24:53:6a:bc:a7:
9e:23:94:87:31:56:11:95:c3:af:5b:30:c2:66:6f:6e:c4:f7:
a5:b9:a7:8b:e7:b5:16:87:3c:72:33:59:e2:5d:13:b9:3d:bb:
02:4c:c3:9a:27:04:49:74:6e:49:24:90:70:d0:be:9d:6b:90:
8b:50:e6:5f:b2:91:48:17:e9:a3:78:88:fa:86:3e:4a:10:ca:
5b:cb:c1:61:50:25:15:af:91:df:ef:af:51:73:a3:64:7c:88:
78:cd:e8:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:57 2026 by rpki-client