Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
File: ju12mE8jGqLHDymCN43Gndg9WFw.cer (raw, json)
Hash identifier: ynU7Cer2MI1Tiaa/O6zu1C3aVX15m08v0HstBhzWRiA=
Subject key identifier: 8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02941D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:18:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 103.228.60.0/22
IP: 180.235.124.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168989 (0x2941d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:18:19 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91F1BE5, serialNumber=8EED76984F231AA2C70F2982378DC69DD83D585C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:f6:77:2e:74:04:60:41:d0:63:91:3d:0d:
40:9b:6b:4b:39:dd:a4:bf:bc:b1:53:df:ed:db:30:
c4:a1:1a:c7:21:20:ef:76:e9:d0:29:ce:65:75:ed:
96:02:75:a6:a0:1c:ff:8c:0f:6a:6a:9e:59:8a:88:
f9:15:9e:cd:8b:99:c8:83:75:2f:73:7f:6e:f0:01:
06:0c:2d:d8:e0:f2:54:77:ad:24:9c:06:36:bd:26:
27:a5:72:00:7d:a8:a8:2d:5c:94:eb:87:7e:35:87:
f7:91:b5:eb:b4:bf:68:21:7b:26:3d:1a:a1:93:f2:
4d:6f:43:e9:ba:eb:3a:86:54:cb:ad:92:49:c8:43:
bc:63:39:e1:27:b6:d1:42:1f:3f:47:4e:00:97:6b:
80:c7:4f:80:f4:bf:9c:a9:ef:50:6f:23:75:e2:98:
de:9a:13:89:1d:e4:25:81:63:17:49:b5:3a:35:4f:
a8:76:b5:bf:f2:c6:af:67:96:c7:88:5e:91:df:66:
7e:d4:56:34:dd:1e:81:b1:d8:2c:c6:9f:c2:ab:7b:
54:48:02:6b:49:22:75:b2:2f:5e:3d:3c:9b:bd:91:
40:63:62:17:10:90:38:a1:67:b1:73:7a:76:10:7c:
fe:59:cb:eb:e9:8d:b8:b5:3a:d7:d3:c7:47:14:fc:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.228.60.0/22
180.235.124.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:13:b4:c9:06:63:58:5a:3e:8c:92:01:31:9b:d8:59:b4:d4:
92:fc:26:6b:32:fe:87:cb:24:bf:17:42:f6:49:1a:76:5f:09:
aa:10:35:0f:3e:d0:c2:af:1f:3a:c7:c4:3e:79:13:1f:fe:e6:
33:6f:2e:f4:bb:d9:fb:a4:73:80:93:00:b6:ad:b6:69:44:3a:
5b:56:96:54:e9:08:58:e4:75:6d:83:d0:42:85:7a:fa:52:b0:
76:ff:83:30:c5:25:d0:96:83:91:94:2a:f7:38:89:e2:6d:f9:
ea:14:56:31:e5:57:17:01:b3:2c:af:66:a9:f6:2a:69:c7:6b:
83:31:27:e6:7e:4b:ce:66:77:cf:26:23:14:3a:11:57:e8:a3:
5d:0f:a9:d8:a7:a5:59:77:f8:96:57:88:9e:bc:7b:51:6d:0c:
c0:41:8a:43:19:f8:d9:a3:64:3f:86:52:0d:6f:ed:16:d0:df:
3b:ea:92:51:a0:49:d7:a8:c5:7f:9f:e3:8f:8d:97:9b:2f:ff:
8d:cd:19:d2:01:ca:93:f2:7e:0c:bf:2a:71:89:45:fa:ea:da:
73:09:41:2e:24:fe:94:41:83:3b:f7:ae:9a:16:75:a1:5d:41:
3d:91:5f:75:8c:2a:db:b6:50:a9:84:1d:4d:16:a0:b1:61:eb:
80:ad:72:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:03:49 2026 by rpki-client