Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer
File: _pmKu7E0uTwc5_hOi5--HdqbZKk.cer (raw, json)
Hash identifier: g1M7HAf3ESn0oYSHdwF1lVmpuUUSS2NpHTrcu6ebsu0=
Subject key identifier: FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029810
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:38:04 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 103.48.164.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170000 (0x29810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:38:04 2026 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A911ABA2, serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9f:9b:2b:84:1f:49:c7:e1:49:58:0d:f5:60:
27:e4:d6:13:7b:5a:55:72:4e:f9:ce:fd:1d:ed:33:
9e:17:e1:e5:46:e2:ef:e3:20:f9:94:2b:65:b4:c3:
6c:1f:60:6c:1f:30:fa:a1:f3:92:01:1b:59:2a:87:
9a:7e:2b:e9:6a:a7:87:8d:06:31:2c:d6:fa:66:6e:
92:bc:46:9e:04:01:7d:f8:e0:76:dc:9e:fd:b5:06:
11:56:2a:60:ee:29:54:a6:29:a8:8d:bc:1c:4c:b4:
82:12:15:70:20:ba:8e:2c:e5:5f:15:b8:d5:8c:d2:
80:73:88:45:d3:0e:ec:c3:8f:4e:83:af:04:cd:4d:
33:00:61:c7:02:ca:1e:c9:83:1e:b3:d7:02:f5:3e:
af:1d:34:a3:0f:32:7a:ac:64:76:9e:cd:19:5a:99:
e3:84:ad:8f:ea:83:eb:7b:81:db:02:4c:8c:e3:5e:
78:23:74:0c:95:46:94:1e:03:a8:c3:ae:d2:36:07:
1a:e7:30:22:9f:53:d6:fd:d3:32:6f:61:20:99:30:
38:a2:49:88:a2:e1:08:de:16:3f:ce:a0:3b:f1:87:
40:5d:59:ed:9d:5a:46:68:06:df:2f:c0:67:3f:1e:
0a:b8:f8:e9:2d:cb:d7:e3:a6:e2:53:2f:0c:11:fa:
e0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.48.164.0/22
Signature Algorithm: sha256WithRSAEncryption
28:2c:d6:33:be:4b:ae:88:4d:81:48:b9:a4:fc:c4:d7:60:2d:
06:d4:1c:07:79:06:9b:70:39:55:90:b9:ac:3c:96:63:4f:ad:
77:fd:c1:46:b7:b5:c0:76:1b:f0:e0:98:9b:d9:0d:dc:ca:bf:
f7:24:08:7d:02:24:bd:eb:11:92:de:6a:b4:a2:2a:9e:28:86:
65:ff:02:0c:10:f5:b3:26:c2:5d:9a:ed:e6:2f:33:fe:5a:ea:
f2:b1:43:c6:84:c5:fa:5c:c6:25:56:52:f2:40:4d:e0:43:59:
ef:e3:1d:c0:c3:15:cc:5f:c2:1d:83:f6:79:cc:10:d8:5d:ff:
c8:b9:06:9f:1d:be:9b:9d:0f:f2:a2:e5:3c:15:03:72:c8:e8:
51:cb:68:98:30:f4:0c:f7:e8:82:6d:1d:e3:3c:d6:46:42:52:
44:fb:d4:66:e8:51:ca:a0:4a:b6:4d:ea:51:78:7f:5f:2d:ec:
00:66:ad:7b:15:c2:76:b4:f3:4a:d0:da:ac:36:18:e8:b1:aa:
7a:50:be:ed:7a:49:9e:90:d6:45:5a:06:83:f9:81:13:64:b0:
62:31:55:a0:29:2a:84:1c:bd:7f:1b:b3:aa:85:82:27:c0:aa:
6b:5e:4f:80:29:ff:d1:23:e1:a4:01:f6:91:44:30:95:b0:78:
b2:28:bb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:05:34 2026 by rpki-client