
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer
File: arqG0wSq9k60oJeym6VXeGDMhW8.cer (raw, json)
Hash identifier: KkrRiTNFvhHSQHXoXlwa/JNWYpjrD0iXfLmIO6/pE3Q=
Subject key identifier: 6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D2FB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Sep 2026 12:58:11 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 135432
IP: 103.133.128.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185083 (0x2d2fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 2 12:58:11 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A915290D, serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fd:61:30:47:90:f3:a1:a5:a9:91:68:93:d8:
d9:8b:b6:69:3f:d0:c4:ff:99:bc:3d:87:40:44:be:
04:b5:c2:80:05:64:f8:61:71:b9:d2:e8:4e:68:e4:
88:6e:7b:7b:68:00:74:7e:2e:9e:6d:97:67:ec:60:
9e:a1:08:83:09:11:a2:44:40:0c:c2:02:c3:5a:39:
99:fa:69:44:5e:c7:95:5e:22:63:cc:fa:ee:33:e6:
5b:cf:67:c7:7d:12:a5:19:fe:90:0a:c5:08:fb:2d:
69:14:41:5c:b0:42:42:a9:30:30:ea:f9:74:b4:a2:
36:16:55:40:11:e5:7c:18:37:ee:53:72:d7:b2:db:
13:83:8a:32:32:66:10:39:c1:98:44:3e:dd:42:3d:
6e:47:b0:fa:53:2a:06:fc:68:ac:9c:8e:b6:cf:47:
6a:4f:66:76:3c:62:13:8f:e7:d4:01:52:9e:3c:c6:
93:75:81:4a:36:cf:84:ae:d7:f3:50:d9:38:2f:f7:
cb:88:ff:04:97:e7:08:36:34:2f:48:6f:4c:cc:b7:
05:72:17:cf:b1:a4:b8:0c:1b:4a:d0:5a:fa:dc:f6:
11:0d:42:d2:73:d6:b1:9e:c6:e4:da:5b:e6:32:c7:
75:60:5e:bc:90:6e:4a:27:76:ce:85:ff:bc:3a:f9:
7d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135432
sbgp-ipAddrBlock: critical
IPv4:
103.133.128.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:8d:44:ed:60:79:03:1b:35:33:43:a4:4a:51:9d:c8:46:d5:
c5:83:cc:7f:45:32:de:1c:2c:7f:88:9e:3e:36:57:65:44:ce:
3d:b3:60:16:6e:c3:07:6f:98:78:fd:6d:7c:64:e1:a2:a0:9a:
95:3d:aa:03:bf:1d:1c:2a:6c:c7:f1:bc:fe:28:a8:d5:0e:74:
d9:62:90:3c:1f:d7:89:b8:06:4a:1d:39:6b:8a:c4:fe:e9:2d:
64:44:e3:0f:41:4e:8f:43:76:de:8d:1d:81:4e:de:b1:ab:61:
bd:83:77:91:95:a1:bd:d4:09:be:99:b2:ad:11:bc:45:de:eb:
ab:82:5d:8c:18:44:6d:b0:79:10:b6:5e:e5:71:ba:ce:71:9d:
f4:96:ea:2f:68:66:29:6e:ce:e8:48:d8:b7:34:7b:f0:d8:06:
15:85:10:fa:67:0e:4a:0f:49:d4:fe:0b:ec:77:63:c5:e3:23:
67:b8:4f:4d:5e:b4:85:b5:a4:9d:2b:f5:ad:71:55:39:66:e0:
38:a7:87:69:bc:ba:24:b1:e7:6e:d4:ae:83:4f:fa:76:a8:b7:
2c:50:f4:db:fb:b1:1a:36:f1:d1:a0:36:ab:4b:80:3e:c9:72:
ca:31:c7:d8:a3:e4:21:a2:f8:df:21:75:e0:ac:11:99:43:96:
a6:76:81:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:00:22 2026 by rpki-client