Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer
File: jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer (raw, json)
Hash identifier: WpaRcqR+n7HyTyWhvkEfwQCeG9uGk4LJvZDQJFVgudA=
Subject key identifier: 8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029F0A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:09:19 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 137239
AS: 154398
IP: 103.105.212.0/22
IP: 2403:240::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171786 (0x29f0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:09:19 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91385F2, serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:00:6f:f5:d9:49:0b:61:88:fe:1f:7b:51:1b:
13:ca:d9:fd:0e:9b:7b:ed:40:70:74:56:91:af:ed:
e7:03:62:c3:45:b1:e4:1a:8a:25:57:8d:46:3c:15:
d6:3e:fd:1c:6c:2b:84:06:19:f2:17:a1:3e:27:e3:
59:3a:1d:92:33:39:62:63:2c:07:10:9b:5e:3e:87:
6d:be:2d:46:11:6d:8a:9b:d0:42:77:29:7e:2e:5d:
10:b7:fa:aa:f4:db:25:21:b7:68:a5:13:e5:be:d9:
fd:0b:cf:ed:1c:d5:bd:20:a9:26:be:15:8d:a0:a9:
39:d1:b5:a6:7b:b4:75:0d:f2:e4:a1:cd:a1:07:7e:
10:f0:01:86:90:b9:b0:11:b7:b8:32:da:51:cd:27:
45:48:21:ef:be:a7:d0:f4:5e:0d:56:f8:d0:89:33:
d5:ab:b5:ec:96:ff:51:a1:e7:18:6b:ab:1d:88:e3:
dd:fa:a4:e5:4f:43:42:1f:28:c6:6e:6f:77:da:7d:
82:1d:3a:a1:58:32:a1:35:f5:bd:49:cd:02:c4:12:
34:46:ad:fe:96:f0:a0:dd:c1:4e:4e:7f:56:36:63:
4f:9d:2a:d1:1e:fc:40:c8:c6:fc:de:f0:94:0d:79:
8d:f8:a2:80:18:03:57:cb:82:76:77:76:93:74:6a:
36:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137239
154398
sbgp-ipAddrBlock: critical
IPv4:
103.105.212.0/22
IPv6:
2403:240::/32
Signature Algorithm: sha256WithRSAEncryption
44:95:39:d6:7c:52:ad:01:75:f6:04:da:ae:6e:b9:3d:55:7d:
a8:82:c6:0c:8f:0c:94:59:c3:a5:d2:01:11:8a:9e:20:b7:bf:
11:4d:d7:0c:0d:7e:aa:b2:70:7c:6f:f5:41:b8:da:b2:e8:3a:
b3:26:95:eb:83:2d:48:aa:1e:30:cd:e9:73:42:7c:91:29:54:
65:d9:1a:2f:39:13:19:e9:dd:93:d4:c9:8f:ff:51:e8:88:77:
87:03:95:ee:59:f3:59:a0:89:51:88:52:a0:ff:c8:b6:7b:20:
86:6c:e5:ad:f0:82:a0:d2:76:b8:84:28:53:1b:b5:c1:88:e7:
ab:5e:f7:81:a7:c6:3d:2c:3d:4e:bb:ca:b9:f3:b6:8c:13:2e:
2d:2b:d3:46:fd:1a:d9:b7:2e:c7:f9:df:ca:d1:22:c5:b3:7b:
87:86:43:55:ba:db:ba:54:c5:e5:11:42:3f:9b:a8:e1:1f:f5:
f3:6c:e3:c4:14:93:74:a7:65:cd:4c:ed:95:de:9d:52:55:af:
e5:d5:f5:28:bc:15:78:18:43:16:06:f7:d4:d7:a3:87:93:94:
8f:0f:01:8f:62:59:75:5d:f6:5c:46:f8:0c:ce:13:0e:2d:0b:
c5:60:49:dc:55:6c:b4:be:17:12:4e:aa:12:45:e2:6e:11:52:
5f:76:9d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:05:48 2026 by rpki-client