Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer
File: aFEZgfy52vrY49MDBLtBqW-5p28.cer (raw, json)
Hash identifier: qpQvtdlT9WKNSs2QcVOy7/Dgh5ytYpCIiiBN8TtEDfg=
Subject key identifier: 68:51:19:81:FC:B9:DA:FA:D8:E3:D3:03:04:BB:41:A9:6F:B9:A7:6F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029318
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:13:29 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 137267
AS: 147051
IP: 103.106.110.0/23
IP: 203.27.18.0/24
IP: 203.33.188.0/24
IP: 2001:df3:a300::/48
IP: 2400:1360::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168728 (0x29318)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:13:29 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A918196D, serialNumber=68511981FCB9DAFAD8E3D30304BB41A96FB9A76F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:6c:7b:ec:9c:35:db:36:44:d2:a9:ad:66:
a6:52:d0:23:f5:3d:74:00:02:ef:1a:de:bc:eb:49:
df:30:61:66:39:a9:f8:fa:41:00:57:48:94:aa:73:
0c:fc:d9:ab:2c:1e:9a:21:c3:07:5f:38:f6:ea:18:
e4:8f:09:7c:8d:94:c5:73:28:f2:8e:6c:f0:29:69:
0e:a3:af:45:28:fc:e4:90:7a:2b:98:71:c1:d9:22:
85:ce:e5:d8:75:3a:82:6a:cc:6f:6b:15:dc:d1:30:
5c:9d:2c:36:e8:48:2d:82:12:48:c6:64:0b:2f:bb:
33:7d:6f:96:24:36:d0:0c:5e:42:b5:b6:da:c4:82:
3f:52:b6:36:5f:0d:d1:02:48:2f:11:5b:82:4a:f4:
cf:e4:ad:49:ba:30:5a:8c:5d:26:e0:4e:e4:c1:80:
f6:cd:ca:d7:75:c5:5d:f1:4d:8e:19:56:2f:cd:2b:
a0:9b:c8:7a:19:48:cc:87:20:17:16:1c:de:0e:79:
12:70:35:dc:28:f6:d0:ba:0f:17:6b:5e:8b:af:00:
86:c9:89:48:3f:61:3a:04:26:00:e8:14:df:12:4a:
3a:31:06:aa:c2:44:15:00:fc:a1:76:26:f2:95:82:
79:53:6a:ca:7a:81:81:a7:24:91:0c:a9:99:07:46:
8b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:51:19:81:FC:B9:DA:FA:D8:E3:D3:03:04:BB:41:A9:6F:B9:A7:6F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137267
147051
sbgp-ipAddrBlock: critical
IPv4:
103.106.110.0/23
203.27.18.0/24
203.33.188.0/24
IPv6:
2001:df3:a300::/48
2400:1360::/32
Signature Algorithm: sha256WithRSAEncryption
86:d3:85:75:f4:d6:be:6d:80:b3:6b:9d:a8:f8:d4:95:78:bd:
69:d2:a7:f9:9b:d1:d3:4f:34:da:06:1b:25:16:28:0b:87:d8:
0b:7a:42:3c:9e:cd:8c:b7:7e:ec:f8:49:82:84:d0:db:a7:2d:
58:6a:6d:52:6e:1a:5b:23:35:f1:09:8e:e8:8a:2c:d2:93:fe:
1c:39:d2:d9:d0:22:86:de:1c:24:31:b0:fe:3a:16:f5:85:1d:
4c:37:4d:96:82:a7:cd:aa:d8:84:ee:ee:d0:1f:ad:6a:73:3a:
ca:c5:7c:ef:8a:ba:ea:74:ab:7f:2c:9b:e6:4e:bd:77:a7:f0:
cc:19:fb:0b:b1:20:4f:64:59:a1:83:0a:a8:37:84:92:4e:44:
12:12:83:99:43:3b:c4:ea:f5:aa:db:f9:4a:bf:7a:a3:18:03:
96:14:33:0e:c6:b2:5d:2f:a0:f2:c6:c7:54:67:af:49:95:5f:
af:89:a5:14:29:47:49:71:5e:cc:9c:08:82:b1:d1:9b:43:4b:
e0:8c:18:71:33:84:16:44:d7:34:db:f2:02:be:88:ef:01:5f:
9f:2e:91:b9:d5:9d:be:8d:13:ac:8c:d5:d4:e2:5e:7d:78:06:
08:5f:cc:03:f1:b1:4e:e8:d6:71:e1:e5:34:60:55:99:5f:39:
5e:b5:54:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:57:32 2026 by rpki-client