
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
File: iiZW272QAzaEH_UDU2_5kY_rJcY.cer (raw, json)
Hash identifier: WAvSf3kXDmPsVHY+z9Dn9BseTa+8smyQc4FpipUs5Gs=
Subject key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BB79
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 05 Jun 2026 13:57:08 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 9554
AS: 135436
IP: 103.219.172.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179065 (0x2bb79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 5 13:57:08 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91A267C, serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2d:93:04:a7:09:65:cb:0e:c6:89:20:52:e0:
50:2f:54:88:c0:49:83:3c:cc:05:47:ee:23:ab:39:
e8:65:f1:23:64:54:bb:53:bc:e7:9f:3a:81:56:b6:
2c:c3:66:73:88:78:c9:28:5f:70:d9:68:8b:fc:e3:
64:38:33:c9:70:99:ba:ce:e9:16:68:3e:a9:32:1d:
1a:e8:c3:ee:23:a6:52:06:49:dc:24:aa:3a:00:67:
67:5d:18:87:4b:c8:b0:bb:99:63:c0:5e:a0:44:18:
d0:6f:e1:0f:1f:c6:da:71:70:21:0e:49:6e:28:36:
76:e6:78:d3:3f:af:a3:b5:f4:5e:0f:4a:4b:b8:07:
e3:86:a6:f7:e5:c1:3b:e3:bc:e0:30:10:0d:81:97:
65:83:af:26:6d:79:49:f9:8c:fe:ba:4f:21:ef:54:
2e:20:22:77:12:57:46:3c:b0:d9:71:a1:0e:b3:27:
dc:8b:12:91:4e:96:06:e7:4f:8f:ed:4e:95:9a:d3:
e9:a2:88:32:97:2b:96:b3:bc:68:44:27:1f:6b:72:
ab:21:ef:cd:d2:e6:91:84:46:78:91:94:12:6d:37:
d9:86:a8:a1:e3:87:b9:b6:3e:67:56:33:54:89:22:
1d:e1:da:d7:57:b9:e8:1b:7b:32:3f:b8:ca:44:e5:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9554
135436
sbgp-ipAddrBlock: critical
IPv4:
103.219.172.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:c2:bc:7d:36:9f:f2:9e:23:9a:25:bc:1a:c7:c0:0b:95:f4:
09:44:63:d7:3b:6f:e5:33:7b:ca:2d:ca:1e:78:5e:4f:23:32:
2d:56:39:17:89:0d:13:d6:9a:00:35:13:c8:2a:5d:a9:f9:e1:
6b:62:4b:b4:bd:45:62:34:a1:5c:68:fa:63:68:d9:fa:01:e8:
5b:3c:7b:62:25:91:bd:80:36:ee:60:44:fa:ad:10:b7:6c:e0:
ab:e1:2e:f5:2e:4f:2b:32:53:e5:67:27:ee:ee:51:14:b5:65:
22:ff:32:7d:5a:a1:14:2c:04:24:8b:0c:ea:10:f7:fd:52:b6:
e9:7c:57:63:e5:7d:c0:05:20:0b:b4:1d:2e:5e:dc:55:9e:b1:
15:20:d7:ec:c7:f8:97:bc:8b:69:86:7e:f1:d1:a3:c0:07:83:
89:13:80:a0:c0:63:6a:f3:b3:69:a1:79:4e:fd:a9:ce:54:8c:
06:d4:c3:07:24:76:45:d5:09:3f:8c:6d:25:1d:dc:e4:23:69:
ec:47:a4:60:03:5d:74:1a:28:2b:29:bd:d1:a6:1c:03:6c:bc:
a1:71:33:d9:cc:fd:64:0c:2c:7d:f4:cd:c9:0a:66:44:f3:34:
88:fa:2b:35:f5:2a:5a:11:07:7f:6a:ed:d5:a3:ff:c8:76:2a:
09:d9:fa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:56:54 2026 by rpki-client