Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer
File: aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer (raw, json)
Hash identifier: /fI9KfBxHuilr8ocJmmdM5uv64Ap5CqeCTi68JPZtJI=
Subject key identifier: 69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029729
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:33:20 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 135357
IP: 103.20.192.0/22
IP: 103.27.176.0/22
IP: 103.30.4.0/22
IP: 103.226.152.0/22
IP: 202.8.120.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169769 (0x29729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:33:20 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9141274, serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:d3:66:26:4f:d4:84:88:eb:c1:dd:2b:eb:d1:
91:c4:b3:ea:6a:22:f4:53:10:79:a1:c4:f0:e7:54:
53:b4:38:df:00:0b:a8:86:00:be:a5:e6:bd:26:73:
ec:df:9d:9d:b8:ed:1e:2d:6a:04:86:fa:a6:0f:78:
10:5f:e7:ca:ed:1c:36:d9:ff:a8:a3:18:6a:07:c4:
4d:0b:e5:ab:b8:8a:c1:3d:b1:a0:9c:ae:d3:9b:84:
3b:98:ad:b0:a4:7d:ad:38:11:c0:59:31:22:9a:22:
a0:6a:17:1b:80:2e:79:6d:81:30:d2:56:71:df:25:
2f:d2:a9:94:db:c4:7f:05:65:6a:56:a3:cd:53:ce:
51:cc:a2:1f:5d:9f:40:3f:2a:ce:59:61:f1:78:46:
db:37:5a:b3:1b:0e:1b:ab:3b:97:91:0f:1e:9a:74:
3b:bd:61:60:cd:87:47:4d:ae:f8:34:c8:26:90:97:
d8:06:a9:fb:e5:14:a6:08:ba:53:1d:ed:24:47:bd:
c1:71:4c:b3:14:27:1f:f3:c3:b6:8a:7c:62:bc:a1:
48:08:2d:5c:9a:7b:f9:4e:3c:04:7d:af:a4:80:cd:
65:6d:bf:c4:ff:ad:69:bd:49:d3:b3:6d:89:8e:eb:
14:56:b2:1e:ce:8b:25:c5:4e:fe:c8:88:66:2e:7d:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135357
sbgp-ipAddrBlock: critical
IPv4:
103.20.192.0/22
103.27.176.0/22
103.30.4.0/22
103.226.152.0/22
202.8.120.0/22
Signature Algorithm: sha256WithRSAEncryption
d9:2e:8e:6a:04:08:6b:3c:15:02:53:81:2d:59:39:c9:96:d4:
1b:88:8f:45:5b:9c:0e:27:58:10:05:b3:0d:88:48:91:d1:78:
1f:01:15:6b:56:4b:d9:10:aa:79:1a:0a:92:ef:ce:86:8f:58:
e3:54:22:89:78:26:fc:c1:3c:0f:7d:5a:69:51:02:f9:83:a2:
d2:a8:45:38:95:6a:58:75:51:81:6c:7c:13:86:95:42:af:81:
ab:00:91:0b:e0:5e:0e:54:a1:7e:e0:36:d4:35:c9:40:09:3c:
78:1d:c8:0f:5a:75:20:22:5b:40:89:66:92:14:a7:db:10:0f:
c4:fa:5e:98:2a:fd:cc:e1:6a:71:6e:96:cb:9b:a1:3a:31:12:
b8:bb:e1:2d:24:eb:bd:2a:26:13:99:00:fa:3d:24:f4:b8:dd:
73:dd:6c:12:97:26:1b:bb:80:6c:8d:e5:b1:18:89:d9:cd:40:
5d:39:d8:d0:2b:c2:6a:fe:c2:3a:2d:91:7b:b3:1e:1f:42:47:
ae:3a:0b:c5:c8:81:a3:c8:4e:6d:84:92:b4:50:3d:ea:03:4f:
96:9a:87:ce:1e:0e:13:44:84:da:fe:68:2d:b3:cd:2c:38:85:
e5:0f:ca:db:4d:37:40:98:e7:7a:15:c0:cf:58:67:74:b1:b3:
0e:0d:0f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:24:50 2026 by rpki-client