Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ju12mE8jGqLHDymCN43Gndg9WFw.cer
File: ju12mE8jGqLHDymCN43Gndg9WFw.cer (raw, json)
Hash identifier: MlmlittdVq+IDC57Tedpfbg7tLmF0k3bmAk9pMrhAWQ=
Subject key identifier: 8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02ABE2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 10 Apr 2026 14:51:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 103.228.60.0/22
IP: 180.235.124.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175074 (0x2abe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 10 14:51:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91F1BE5, serialNumber=8EED76984F231AA2C70F2982378DC69DD83D585C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:f6:77:2e:74:04:60:41:d0:63:91:3d:0d:
40:9b:6b:4b:39:dd:a4:bf:bc:b1:53:df:ed:db:30:
c4:a1:1a:c7:21:20:ef:76:e9:d0:29:ce:65:75:ed:
96:02:75:a6:a0:1c:ff:8c:0f:6a:6a:9e:59:8a:88:
f9:15:9e:cd:8b:99:c8:83:75:2f:73:7f:6e:f0:01:
06:0c:2d:d8:e0:f2:54:77:ad:24:9c:06:36:bd:26:
27:a5:72:00:7d:a8:a8:2d:5c:94:eb:87:7e:35:87:
f7:91:b5:eb:b4:bf:68:21:7b:26:3d:1a:a1:93:f2:
4d:6f:43:e9:ba:eb:3a:86:54:cb:ad:92:49:c8:43:
bc:63:39:e1:27:b6:d1:42:1f:3f:47:4e:00:97:6b:
80:c7:4f:80:f4:bf:9c:a9:ef:50:6f:23:75:e2:98:
de:9a:13:89:1d:e4:25:81:63:17:49:b5:3a:35:4f:
a8:76:b5:bf:f2:c6:af:67:96:c7:88:5e:91:df:66:
7e:d4:56:34:dd:1e:81:b1:d8:2c:c6:9f:c2:ab:7b:
54:48:02:6b:49:22:75:b2:2f:5e:3d:3c:9b:bd:91:
40:63:62:17:10:90:38:a1:67:b1:73:7a:76:10:7c:
fe:59:cb:eb:e9:8d:b8:b5:3a:d7:d3:c7:47:14:fc:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:ED:76:98:4F:23:1A:A2:C7:0F:29:82:37:8D:C6:9D:D8:3D:58:5C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F1BE5/3EE77E6E001811F1AB4D8D18426F56BC/ju12mE8jGqLHDymCN43Gndg9WFw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.228.60.0/22
180.235.124.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:95:10:b5:df:f6:af:90:7f:6a:0d:5e:5b:09:e2:76:46:31:
5b:5e:55:05:f4:29:05:96:ba:08:73:aa:81:ac:d4:32:9e:67:
2c:1f:86:18:3d:95:bc:4c:a5:1d:de:cb:4d:f5:2b:7c:bc:84:
25:b1:8e:a2:52:0e:fd:b3:71:3d:a6:ad:4a:be:47:20:6d:4e:
2f:5a:77:bc:22:00:9e:ed:e5:cf:2e:b0:77:81:0f:66:b1:71:
61:e3:3e:93:43:2d:b9:76:9a:07:91:5d:5f:ce:01:a3:44:e2:
48:88:47:a2:20:72:2f:c3:e3:71:45:22:0b:05:f4:38:20:ad:
3b:98:d5:79:76:70:88:5f:a9:10:e7:a2:03:88:4f:cd:c4:83:
32:93:2a:83:48:f2:52:38:c8:d9:37:2a:1c:3f:35:10:e8:43:
51:ba:7f:e0:33:6b:ce:a7:92:94:70:c6:5c:5a:ee:86:8b:e4:
be:61:59:17:43:41:95:e9:d0:31:3b:0b:5f:e9:87:39:c4:74:
b5:e3:05:76:f4:cf:e2:13:f2:67:a2:47:e4:3b:08:42:c9:74:
81:15:42:64:36:df:32:59:df:6a:de:b5:5e:8f:73:99:f2:69:
80:ac:41:4a:e7:c6:92:be:07:a7:da:32:f3:b9:75:c0:02:c0:
28:3f:fd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:47:06 2026 by rpki-client