Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dTtODkQmioFmFCG306CSJ-Xi3K4.cer
File: dTtODkQmioFmFCG306CSJ-Xi3K4.cer (raw, json)
Hash identifier: V0o16y/YCzD3vWeYrZOezEPsenVPTCpjrgM9aLNdMwI=
Subject key identifier: 75:3B:4E:0E:44:26:8A:81:66:14:21:B7:D3:A0:92:27:E5:E2:DC:AE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02E28C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911170F/46064FD09F6A11F1AC7746063611F970/dTtODkQmioFmFCG306CSJ-Xi3K4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911170F/46064FD09F6A11F1AC7746063611F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 01 Nov 2026 12:20:45 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 133729
IP: 103.39.114.0/23
IP: 2001:df0:ac00::/44
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Nov 2026 02:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189068 (0x2e28c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 1 12:20:45 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A911170F, serialNumber=753B4E0E44268A81661421B7D3A09227E5E2DCAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:b9:d6:dd:55:90:de:61:f1:f3:8b:1f:45:
ca:26:de:6d:5c:3d:05:99:42:ea:b2:c8:e9:75:d5:
4c:e3:f3:f2:34:3b:61:f0:13:64:de:b1:89:7a:9e:
67:cc:59:0d:cd:c9:8e:61:ef:cd:28:97:11:b7:10:
4b:16:89:c1:cb:93:3d:29:7f:e7:cd:a6:5e:6c:bf:
23:7a:66:bf:df:12:c0:0e:91:b4:9f:54:5c:11:f4:
fa:cf:ca:1d:78:28:2f:22:24:c6:82:a9:be:cd:a5:
21:75:6f:69:45:e0:16:33:36:42:6f:6b:ef:f9:33:
d3:c8:58:9d:76:86:d5:79:8a:1c:d4:9f:99:ca:6e:
2a:84:a3:e3:9b:98:63:a3:22:d1:9a:47:ea:bf:4e:
85:2e:73:ef:ba:b1:69:86:1f:73:d2:40:73:9c:71:
fb:26:7c:20:09:6b:00:2d:c4:ba:83:2c:3f:8b:af:
7f:dd:95:33:eb:68:35:9f:1a:c5:19:a2:fa:a8:3a:
f5:a8:7b:bc:89:60:fe:db:93:d9:ed:d1:fb:30:c7:
0f:36:35:ee:71:ad:01:ef:9e:39:71:09:db:e2:79:
eb:26:23:aa:c7:9e:33:27:dd:da:d8:b2:1e:bb:6c:
89:c5:f9:f0:65:ab:5f:7a:d3:c4:f0:1f:c9:f8:7b:
b1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3B:4E:0E:44:26:8A:81:66:14:21:B7:D3:A0:92:27:E5:E2:DC:AE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911170F/46064FD09F6A11F1AC7746063611F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911170F/46064FD09F6A11F1AC7746063611F970/dTtODkQmioFmFCG306CSJ-Xi3K4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133729
sbgp-ipAddrBlock: critical
IPv4:
103.39.114.0/23
IPv6:
2001:df0:ac00::/44
Signature Algorithm: sha256WithRSAEncryption
ce:b2:46:0d:11:a9:b6:f8:43:3c:be:f4:b4:6f:d8:51:20:3b:
38:34:37:26:b0:93:c2:35:fa:3e:1f:0c:2b:b8:f8:4c:34:65:
c3:53:bd:b1:7e:03:b3:15:1a:28:7d:dc:b9:9d:5b:d2:d9:e8:
cd:48:bf:e0:58:15:30:e5:5f:09:e3:f1:be:0e:a2:6a:10:56:
ff:11:a7:d6:2c:54:bb:d1:6d:3c:5c:39:14:eb:b2:ba:55:bc:
f3:16:74:ca:ff:30:c2:85:9e:7b:86:cf:54:44:24:3b:53:d9:
73:97:51:f1:10:da:32:5b:f3:1e:b2:ab:4d:00:f9:c3:61:66:
7b:3f:54:6d:6a:8e:5f:ab:17:2f:7a:98:58:b2:b5:49:60:88:
62:3d:c1:6e:d4:41:e8:0c:63:0c:f0:49:21:f6:8b:5b:3d:39:
a0:5c:2d:b1:46:b1:c6:0d:d4:cc:97:87:3d:9a:3c:4e:4d:4e:
48:ff:90:3e:16:df:0e:f4:c4:c7:ea:61:02:e6:38:ad:b5:2b:
9d:50:4c:80:d3:03:b8:d6:18:a5:2e:08:5e:17:bb:f1:c9:28:
31:ab:5b:93:be:8b:64:ce:ec:e6:b9:fe:45:98:5f:51:3c:a9:
87:0c:af:c6:3a:59:79:6e:75:59:6d:8b:6e:d0:ab:c0:a2:5a:
5e:48:21:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 10 06:59:25 2026 by rpki-client