Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp5BfpwYtVbAVK2cANsDne-LgmQ.cer
File: dp5BfpwYtVbAVK2cANsDne-LgmQ.cer (raw, json)
Hash identifier: yUa4MZQxqpBJS89rOy3wRS4TTJg9Pg3bFaawAv4jD/8=
Subject key identifier: 76:9E:41:7E:9C:18:B5:56:C0:54:AD:9C:00:DB:03:9D:EF:8B:82:64
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D234
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D7B93/E6B912C4A5D111F1A2E8764E3411F970/dp5BfpwYtVbAVK2cANsDne-LgmQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D7B93/E6B912C4A5D111F1A2E8764E3411F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Sep 2026 06:54:00 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 137564
IP: 103.113.160.0/22
IP: 2402:be40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 17:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184884 (0x2d234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 1 06:54:00 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91D7B93, serialNumber=769E417E9C18B556C054AD9C00DB039DEF8B8264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:cc:e9:fb:b9:ef:73:1b:31:89:9c:aa:7a:
46:25:ae:6f:9f:74:8a:a3:22:db:6d:82:d4:f3:06:
0e:5e:04:fd:f9:28:2b:8d:a0:b7:66:f4:36:db:1d:
bb:15:ed:25:f4:9c:4d:04:5f:4f:93:99:51:2f:c3:
8b:91:39:0b:9b:2a:36:b2:c9:3e:84:1f:91:9f:7b:
3e:e8:cd:8f:ee:35:00:6e:bf:05:db:ec:ad:79:fe:
79:b8:39:4e:a6:70:76:2e:cb:69:aa:94:77:e0:d7:
dc:6d:73:1a:b3:89:5c:cd:ef:bd:a7:96:e1:c9:d8:
f0:4d:af:ae:81:77:2e:5f:ff:d9:df:c4:58:42:3c:
fa:52:e2:06:84:67:6f:9b:35:55:c5:2f:77:0c:80:
51:96:95:be:c9:61:29:84:30:48:98:b8:ae:67:e1:
f6:79:26:77:28:b7:8a:27:53:bb:0e:e7:57:f0:8b:
38:51:ad:85:d7:b7:94:3b:c3:40:8c:30:49:dc:9e:
2b:7d:cd:e5:d5:78:80:47:a1:fa:ea:c3:5d:7e:f9:
65:07:15:bd:fd:47:8b:be:eb:b5:c1:9d:9d:55:02:
20:4a:ff:a5:15:9e:d8:30:d2:f7:46:3d:04:b0:45:
23:47:18:cd:c8:7c:5a:9e:38:8b:8b:f2:28:76:e8:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9E:41:7E:9C:18:B5:56:C0:54:AD:9C:00:DB:03:9D:EF:8B:82:64
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D7B93/E6B912C4A5D111F1A2E8764E3411F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D7B93/E6B912C4A5D111F1A2E8764E3411F970/dp5BfpwYtVbAVK2cANsDne-LgmQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137564
sbgp-ipAddrBlock: critical
IPv4:
103.113.160.0/22
IPv6:
2402:be40::/32
Signature Algorithm: sha256WithRSAEncryption
31:44:f7:18:3d:67:1e:01:29:33:b1:e0:d2:46:7a:9f:82:39:
ed:a4:10:ca:fe:f1:9d:ec:a7:27:34:a5:93:5a:d3:1a:29:37:
45:10:87:53:52:07:44:d1:0c:fc:8d:9d:4f:8c:d5:bb:aa:dd:
b1:53:44:09:c9:05:98:80:20:ee:13:da:1a:60:68:53:f5:a0:
da:ff:86:c8:01:94:39:df:95:55:95:f0:cc:db:cf:76:25:5d:
40:36:ab:21:6c:d8:61:d8:f4:4e:68:73:9b:f8:f7:35:d4:31:
2b:fa:15:f8:cf:f9:c9:57:3d:3a:cc:29:6a:de:d1:f6:78:c1:
27:ea:c1:2b:34:24:de:97:81:0c:19:47:01:22:16:4a:7d:8d:
60:ec:f5:e1:76:f4:1b:bd:ba:bf:0e:61:3c:f2:b0:ad:48:2b:
cc:89:ab:f7:a1:6e:1b:bf:79:11:05:1c:8a:63:2a:d3:1c:96:
26:58:d9:ec:51:2f:01:c5:cd:98:aa:31:a7:ae:c1:92:13:d0:
86:01:25:9b:da:ea:84:a8:64:34:bd:a0:9c:f1:2a:7c:3c:6f:
d2:c7:39:bb:50:68:73:5d:e2:4d:59:c4:15:82:d5:d9:5d:c8:
05:09:3b:79:d7:aa:d2:43:21:66:a1:ba:c8:a8:29:ae:e5:f8:
99:e0:4f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:38 2026 by rpki-client