Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
File: bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer (raw, json)
Hash identifier: aRslV54tsn2QZrKC11wiZI2TXp/YMeGwT6upzqNKDOc=
Subject key identifier: 6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AAE0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Apr 2026 13:00:57 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 38175
AS: 38194
AS: 38206
AS: 38208
AS: 133086
AS: 138009
IP: 103.10.57.0/24
IP: 103.119.232.0/22
IP: 103.163.20.0/24
IP: 2001:deb:c000::/47
IP: 2403:4ac0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174816 (0x2aae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 8 13:00:57 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9148F80, serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:3c:37:7c:a0:ac:11:fb:09:26:72:05:a1:
c5:47:11:da:31:11:9b:89:59:b0:2f:61:0e:26:3d:
52:e3:b6:5c:f4:57:a6:34:6a:96:7f:19:ae:97:a4:
35:77:c9:67:69:03:83:98:b0:0b:9d:06:52:88:b5:
04:62:e2:1b:9b:77:8c:7b:12:b2:03:9f:d9:47:a1:
6b:12:92:2b:39:db:02:0a:f8:72:27:52:34:48:76:
62:4c:8a:4e:db:8d:21:ab:37:85:cd:a9:3e:fa:4c:
58:a7:80:fc:28:5a:ec:12:3d:9e:fa:8b:69:bd:7e:
68:c9:8a:18:fc:f3:5e:2f:88:4a:4d:00:f2:00:e6:
e7:de:15:c5:76:97:f4:24:a8:bb:64:d7:e7:8b:73:
dd:8e:76:74:f0:dd:ca:a0:2e:20:be:fa:49:0a:7e:
bc:64:0a:16:cd:46:84:2e:b6:3c:4a:6c:e1:cc:26:
59:30:76:2b:c1:15:6e:f5:c3:e2:ef:78:b0:db:41:
20:a6:e1:4c:55:7c:93:da:19:d6:9f:da:bc:66:f7:
fa:4e:ab:2a:2f:1e:ea:2f:b3:51:1b:f7:13:29:c9:
6e:f7:a6:dc:b7:8e:e7:a6:06:2f:2b:a6:38:db:c1:
89:75:32:a9:76:df:5b:0e:b0:5e:cb:0b:74:7e:66:
11:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38175
38194
38206
38208
133086
138009
sbgp-ipAddrBlock: critical
IPv4:
103.10.57.0/24
103.119.232.0/22
103.163.20.0/24
IPv6:
2001:deb:c000::/47
2403:4ac0::/32
Signature Algorithm: sha256WithRSAEncryption
89:b3:8b:64:8d:08:1a:aa:10:87:87:13:76:35:24:a2:dc:6b:
c8:98:ca:a7:48:ab:12:04:a6:79:01:ac:29:95:05:31:74:c7:
0e:6a:ed:3a:84:1b:c3:d8:52:45:01:6c:5a:0f:89:ae:2e:24:
ad:01:a8:20:cd:54:70:47:1e:de:94:85:4a:bd:fe:47:0a:5d:
51:13:5e:a7:97:8f:db:bb:0d:e8:89:69:b9:39:7b:e4:3e:36:
51:3a:e6:3b:53:c8:96:24:6d:78:cd:66:a5:14:6c:aa:d7:73:
a1:95:2d:75:bd:08:6c:2a:6b:c5:40:2b:f6:b2:53:8a:02:50:
45:a2:13:90:ea:81:82:a0:55:f4:fc:60:af:ee:f9:b0:27:c0:
75:89:b5:ba:d9:1d:bc:be:6e:29:d4:09:c6:3e:5d:bd:83:b1:
d5:ad:9e:1f:61:50:25:b9:8d:40:cf:5b:a4:3f:25:bd:cb:05:
08:dc:c8:fe:b1:4e:02:41:8c:00:4f:cb:8f:7f:2a:da:70:78:
26:9e:e7:fd:2c:de:46:3f:ae:8f:4e:39:37:b8:16:50:5b:5d:
0a:45:0c:76:c8:28:91:50:5d:c7:2a:06:9c:e8:d7:f3:ab:64:
8c:16:6c:51:02:93:fa:9d:f9:04:0f:b7:aa:d5:5f:dc:5e:47:
b0:77:d6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:03:01 2026 by rpki-client