Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer
File: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer (raw, json)
Hash identifier: nJyjdjQTxT5ZCkcLTXt48fKTrtHB7ZeiUVXksXj3Swg=
Subject key identifier: FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029D4A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:01:28 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 147182
IP: 103.174.48.0/23
IP: 2407:fac0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171338 (0x29d4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:01:28 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A918233C, serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:0e:02:18:c3:df:21:3d:64:13:b4:ca:ed:
e8:f4:6e:d3:ab:ab:bb:a1:56:f1:ad:ea:30:77:2a:
5a:75:f3:d3:00:75:ec:07:4b:03:d9:b1:8c:58:3f:
58:46:f1:7f:a5:a2:e2:ca:91:76:de:34:ee:bd:3c:
31:08:b1:d4:e1:54:2c:ca:9b:ea:b3:b2:77:d7:fd:
44:ab:7b:43:0f:c2:bc:90:eb:ed:8a:86:42:b7:12:
48:2e:da:4c:bc:19:f9:18:4d:6a:12:67:02:a7:b7:
e5:68:81:44:58:7b:36:37:88:ea:65:10:ce:2d:41:
ae:fa:0d:00:34:66:b2:c2:bc:05:16:84:16:28:a2:
c6:ac:06:2d:e6:4b:61:1e:e2:f4:4c:61:a0:22:06:
e7:af:ee:d2:d1:80:97:66:9c:50:1a:f3:dc:5b:82:
d8:6a:97:46:88:af:2a:9c:06:aa:1f:e8:4d:a5:a5:
e2:8e:f9:7b:b1:2e:27:12:b2:83:88:b5:68:ba:38:
0e:da:72:29:b3:07:fe:c6:d2:49:ad:0a:a8:37:ac:
db:df:d7:cd:ce:34:af:8d:2e:9e:74:0d:ed:0e:b0:
68:21:16:7e:b1:7f:8e:e2:94:b2:64:00:df:0b:76:
02:52:c2:15:6a:38:f0:90:c6:3b:0c:a4:fc:2b:a9:
17:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147182
sbgp-ipAddrBlock: critical
IPv4:
103.174.48.0/23
IPv6:
2407:fac0::/32
Signature Algorithm: sha256WithRSAEncryption
cb:3d:07:32:b2:07:b4:6b:22:38:bc:bb:54:95:38:1a:c9:25:
d9:1b:17:95:3f:4a:00:58:85:df:68:03:91:87:2f:f9:7f:5a:
81:1a:a7:e9:5e:61:9b:6e:32:c5:e9:90:80:78:67:0c:d4:b9:
40:a6:40:3b:49:92:0d:2e:ed:03:56:23:7c:4f:d2:f3:96:28:
5c:22:36:a4:cf:71:89:92:bb:66:ef:9a:22:dd:ba:64:20:d7:
40:66:82:5b:a5:1e:18:fe:6f:b1:71:2b:b5:5c:fb:a6:03:e6:
52:eb:5a:5e:dd:0e:f5:d3:b2:e3:bf:52:25:6b:c8:b1:95:2c:
f3:a1:44:cc:2c:7d:c0:c0:fd:06:22:73:9f:2c:2e:64:8a:86:
a8:02:f0:8a:f3:d0:51:44:ec:38:09:02:85:fd:75:98:28:04:
1b:d5:8a:1b:90:3a:16:49:83:0d:2c:5d:45:1a:0a:f0:e7:84:
31:7b:c8:e9:7c:45:25:69:ba:bc:2b:12:50:1e:c4:85:2c:3b:
c2:41:23:6a:07:c9:70:d2:9f:ca:fe:d0:b7:a7:f1:70:c1:3e:
09:15:e5:12:60:59:62:54:d8:b9:0e:dc:10:8a:d0:35:28:8c:
b7:b8:c0:01:dd:91:8a:01:0e:04:24:a5:ad:8f:bc:63:cf:8e:
9c:28:0f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:22:57 2026 by rpki-client