
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer
File: je6uhW6V886s4RLAoeqXukWlekQ.cer (raw, json)
Hash identifier: 3+8l4xXNxOXhKBFUFzmytdIZ8qQeDYC0rWV9lw2NL5Q=
Subject key identifier: 8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029310
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:13:20 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 45648
IP: 27.34.240.0/20
IP: 43.254.160.0/22
IP: 103.228.220.0/22
IP: 111.125.192.0/23
IP: 111.125.200.0/21
IP: 111.125.212.0/24
IP: 183.87.212.0/23
IP: 183.87.250.0/24
IP: 203.201.60.0/22
IP: 2400:d280::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168720 (0x29310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:13:20 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91C39D1, serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d7:86:91:5c:72:1a:cb:9b:ac:4c:f1:cc:d9:
99:fe:39:01:f5:37:f0:04:bf:85:7c:b3:ea:a0:9a:
48:3a:6b:05:d2:f6:73:ea:c3:d4:6f:30:5e:dc:a0:
81:25:6b:94:08:93:18:64:10:b9:a6:02:b3:7d:d3:
35:e9:bd:bd:be:a6:e9:75:85:7c:d5:d2:69:e3:71:
54:5d:ef:6b:3c:05:08:17:d0:d1:fa:8b:31:0f:e2:
91:ee:87:e6:a5:70:6f:7a:4b:f6:d0:6c:6e:dc:0e:
f9:12:7f:79:63:f0:80:6e:aa:6e:0b:a0:f8:a5:5d:
5d:6f:27:63:9b:97:a3:b7:b4:95:41:d1:fb:bb:f7:
dd:bd:e0:4f:19:82:f2:2b:f3:6f:32:d3:1f:d4:99:
d5:c4:85:8e:fa:15:0f:46:8b:08:d9:94:03:84:bf:
98:22:08:9f:fb:b7:26:52:b4:74:c5:a2:69:92:83:
2c:af:08:50:59:11:45:67:c6:d8:75:c7:b4:09:95:
0c:22:6b:3c:4d:4a:26:16:b9:d4:a7:20:e6:0b:d5:
f9:e0:d6:70:df:9e:89:e6:14:9a:3e:3d:1b:2d:b1:
11:3f:83:65:cc:e6:28:1d:64:ed:8e:bd:15:fb:03:
47:82:f2:95:64:4a:4d:a6:f6:24:2c:9d:a6:82:6f:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45648
sbgp-ipAddrBlock: critical
IPv4:
27.34.240.0/20
43.254.160.0/22
103.228.220.0/22
111.125.192.0/23
111.125.200.0/21
111.125.212.0/24
183.87.212.0/23
183.87.250.0/24
203.201.60.0/22
IPv6:
2400:d280::/32
Signature Algorithm: sha256WithRSAEncryption
94:45:2c:b7:aa:4a:9e:4b:73:7b:05:3e:d0:1c:cf:07:72:44:
9b:25:44:1c:46:e8:ef:40:71:6d:93:a8:95:93:34:ff:00:db:
4d:4f:39:91:5a:21:60:d0:89:46:48:78:f5:b5:06:0a:40:20:
6f:eb:54:5e:d1:99:9a:30:5e:fa:ae:ee:01:8e:02:49:63:6f:
0a:cc:11:b3:87:af:33:36:7e:81:8a:a7:13:2b:a8:d6:06:c5:
36:de:ed:98:0d:e9:be:8b:58:70:71:a6:9c:27:b0:d3:98:65:
56:77:d9:ec:b0:a4:ef:73:d5:16:be:46:55:6f:2f:c0:23:11:
ed:9c:89:99:ad:e2:3e:e6:72:92:5f:f4:46:e5:39:0c:08:d0:
b7:33:25:97:ed:b7:43:33:23:28:38:a6:a1:9e:1d:a1:64:5a:
78:50:bd:35:04:df:fb:06:aa:f8:7e:1c:79:b5:d6:0d:2d:b2:
a5:48:ce:40:0e:33:db:63:f3:ce:fb:5d:13:76:27:51:22:e7:
9c:8e:dc:65:81:f2:d4:4f:c1:ea:90:d2:6e:1a:53:84:38:3f:
cb:b5:2f:2d:cd:63:3a:9d:8f:11:b4:83:4a:38:f2:ab:07:13:
0f:e8:50:63:3f:ce:91:7a:46:1f:cf:f7:1f:8f:ea:73:c7:26:
c6:e7:7f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:42:10 2026 by rpki-client