Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer
File: j4RQ6hjtZj3XYxNayPnBormb2W0.cer (raw, json)
Hash identifier: mpVlnCana9xzPEFG0yIJgec4lZ+VpzffgmHHxlwHGa0=
Subject key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CA87
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Aug 2026 06:06:28 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 132864
IP: 103.207.28.0/24
IP: 2404:2780::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182919 (0x2ca87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 3 06:06:28 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A913D9CB, serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:f4:21:e9:00:a1:93:ed:87:8e:92:9c:67:
7c:ab:51:b2:58:43:76:6b:df:81:de:24:82:07:cd:
06:9d:ff:06:01:e1:c5:cf:33:92:6a:c1:c2:6c:39:
be:18:27:92:62:57:fc:05:65:3a:9b:42:05:1b:6e:
25:53:49:2c:9f:53:3f:3b:8b:79:94:b9:1b:63:8b:
4d:a0:a1:8b:26:81:3e:35:49:bd:ce:11:b6:a7:03:
17:c2:17:46:cc:fc:7c:d7:39:0d:7e:5d:b2:03:c2:
8e:07:43:6b:98:66:4c:c6:10:4a:19:be:96:16:cc:
25:14:6f:7a:9b:17:16:0c:7f:78:e1:68:cd:3f:94:
a0:4d:17:d5:c6:7e:6c:7b:76:44:34:c8:c1:92:2f:
fb:1d:72:5e:76:4c:67:ac:8d:08:4f:bc:b3:14:8d:
c2:50:1c:7d:6b:18:9c:49:ff:04:31:66:bd:d0:97:
0a:dd:7a:b0:ea:9e:2c:0b:d6:4a:bc:76:70:37:5f:
e4:94:3b:34:ec:9e:63:e0:ed:7d:5d:d5:73:44:68:
24:c7:fb:b2:f9:7d:31:ac:98:d4:63:bb:43:ed:06:
9e:8a:d8:67:37:db:1e:bf:f1:0a:45:b4:2b:eb:6c:
f7:77:56:d8:de:18:02:b9:6f:93:93:83:30:ac:1b:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132864
sbgp-ipAddrBlock: critical
IPv4:
103.207.28.0/24
IPv6:
2404:2780::/32
Signature Algorithm: sha256WithRSAEncryption
32:df:e8:db:d0:0c:00:1a:3c:ad:1d:36:ca:ac:59:eb:d9:66:
aa:35:7e:d0:6b:6d:89:5c:60:c2:9c:ee:35:0d:90:90:b4:02:
29:c0:ae:75:f2:9c:26:7d:32:15:cc:91:ce:33:9f:6f:cc:9e:
90:f3:a4:78:03:cf:a7:8c:92:c7:6c:10:ad:ce:f7:ba:0b:22:
6a:d0:f2:62:b7:00:fb:6e:61:96:64:07:75:36:66:6a:cb:98:
e1:e3:d1:89:6b:3d:b5:96:10:bb:f2:e9:a4:c1:95:92:48:2d:
2a:2d:46:7a:13:7a:d1:e1:a1:79:c4:82:21:1f:c1:8f:78:56:
80:ed:da:bd:e4:d6:a2:07:08:c0:4b:64:70:2c:3a:54:3c:71:
fa:07:db:30:77:fa:07:60:53:19:a3:c0:5f:b5:fd:5e:b9:b5:
12:8a:0f:57:08:05:b4:b8:01:50:86:b4:d5:b1:39:35:43:34:
ec:c8:cf:c3:5c:73:78:71:95:40:01:c0:18:3a:1f:05:fe:f8:
d6:d6:9b:e4:5e:7b:de:6c:33:9a:da:d6:8a:cc:7a:48:d2:76:
dd:cc:f3:29:e8:80:1a:42:c3:d6:34:92:1f:43:31:a0:f4:27:
f8:12:cb:92:4b:a8:68:65:de:f6:34:21:fa:b1:83:ad:e7:09:
7d:99:89:07
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAsqHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDgwMzA2MDYyOFoXDTI3MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxM0Q5Q0IxMTAvBgNVBAUTKDhGODQ1MEVBMThFRDY2M0RENzYzMTM1
QUM4RjlDMUEyQjk5QkQ5NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2ovQh6QChk+2HjpKcZ3yrUbJYQ3Zr34HeJIIHzQad/wYB4cXPM5JqwcJsOb4Y
J5JiV/wFZTqbQgUbbiVTSSyfUz87i3mUuRtji02goYsmgT41Sb3OEbanAxfCF0bM
/HzXOQ1+XbIDwo4HQ2uYZkzGEEoZvpYWzCUUb3qbFxYMf3jhaM0/lKBNF9XGfmx7
dkQ0yMGSL/sdcl52TGesjQhPvLMUjcJQHH1rGJxJ/wQxZr3QlwrderDqniwL1kq8
dnA3X+SUOzTsnmPg7X1d1XNEaCTH+7L5fTGsmNRju0PtBp6K2Gc32x6/8QpFtCvr
bPd3VtjeGAK5b5OTgzCsGxjxAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUj4RQ6hjt
Zj3XYxNayPnBormb2W0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTNEOUNCLzNGRDJEOUM0Q0EyQTExRUE5NUVBODg3RkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzRDlDQi8zRkQyRDlDNENBMkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhq
dFpqM1hZeE5heVBuQm9ybWIyVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgcAMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAZ88cMA0EAgAC
MAcDBQAkBCeAMA0GCSqGSIb3DQEBCwUAA4IBAQAy3+jb0AwAGjytHTbKrFnr2Waq
NX7Qa22JXGDCnO41DZCQtAIpwK518pwmfTIVzJHOM59vzJ6Q86R4A8+njJLHbBCt
zve6CyJq0PJitwD7bmGWZAd1NmZqy5jh49GJaz21lhC78umkwZWSSC0qLUZ6E3rR
4aF5xIIhH8GPeFaA7dq95NaiBwjAS2RwLDpUPHH6B9swd/oHYFMZo8Bftf1eubUS
ig9XCAW0uAFQhrTVsTk1QzTsyM/DXHN4cZVAAcAYOh8F/vjW1pvkXnvebDOa2taK
zHpI0nbdzPMp6IAaQsPWNJIfQzGg9Cf4EsuSS6hoZd72NCH6sYOt5wl9mYkH
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:16:39 2026 by rpki-client