Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJTbzLCZPZNW3iYiNSEr-nxpWzA.cer
File: kJTbzLCZPZNW3iYiNSEr-nxpWzA.cer (raw, json)
Hash identifier: eookdVU5v+NukBbVzWxKN29bzMZBVZtqPo7S2nA5sBI=
Subject key identifier: 90:94:DB:CC:B0:99:3D:93:56:DE:26:22:35:21:2B:FA:7C:69:5B:30
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CE6A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9182D8F/EDE760449BB511F1A4863AE55211F970/kJTbzLCZPZNW3iYiNSEr-nxpWzA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9182D8F/EDE760449BB511F1A4863AE55211F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 19 Aug 2026 10:08:34 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 132472
IP: 103.30.121.0/24
IP: 103.39.7.0/24
IP: 103.39.42.0/23
IP: 2001:df0:420::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183914 (0x2ce6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 19 10:08:34 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A9182D8F, serialNumber=9094DBCCB0993D9356DE262235212BFA7C695B30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:0d:12:34:45:77:d4:cb:d9:95:20:ec:50:
88:46:a3:51:42:72:70:af:d1:53:33:75:6f:07:2e:
a2:e6:dc:89:b5:b9:47:84:8e:34:3b:9f:db:ae:4b:
57:26:87:50:f7:93:dc:56:25:53:23:e3:31:d6:32:
ca:f6:3d:7e:8f:9d:c5:69:93:9e:d3:e1:bc:84:96:
7e:ba:5b:67:a1:47:27:8d:d1:d6:43:ef:a9:81:7d:
42:18:dc:c9:44:e3:04:56:29:81:69:8f:ea:8a:6e:
99:e2:0b:3a:08:a4:79:d7:fc:24:2d:b2:cc:fc:c5:
44:fd:3b:18:01:d5:7e:11:55:7f:5c:11:d3:53:9b:
d7:3d:89:57:8e:ef:f4:1d:3a:17:26:d6:1e:0d:5c:
04:c4:b4:31:6d:64:42:0f:d2:11:64:22:37:3e:91:
b6:59:9f:e1:d6:4d:fb:7e:f0:5b:22:7f:c9:90:50:
37:26:79:83:1b:8e:4d:d2:3e:33:38:47:5f:e0:f2:
27:b5:4f:92:bd:42:29:62:aa:ea:9e:fd:28:27:d2:
ec:cb:81:6b:62:03:b6:6f:36:30:b5:e6:f8:02:7c:
6d:39:bb:41:84:22:71:54:70:5c:86:f6:62:28:d7:
3f:89:3a:ef:ae:18:3f:15:f2:d6:18:19:f0:2a:47:
81:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:94:DB:CC:B0:99:3D:93:56:DE:26:22:35:21:2B:FA:7C:69:5B:30
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9182D8F/EDE760449BB511F1A4863AE55211F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9182D8F/EDE760449BB511F1A4863AE55211F970/kJTbzLCZPZNW3iYiNSEr-nxpWzA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132472
sbgp-ipAddrBlock: critical
IPv4:
103.30.121.0/24
103.39.7.0/24
103.39.42.0/23
IPv6:
2001:df0:420::/48
Signature Algorithm: sha256WithRSAEncryption
3c:65:30:d6:b5:8e:5f:09:9a:1f:a9:d5:74:28:78:88:26:b0:
4b:e3:7d:d0:2e:a4:4c:6b:b3:a2:59:45:fd:64:64:14:8b:19:
9f:5e:9b:5a:c9:42:69:95:4e:01:64:41:6d:c6:c8:2c:24:73:
5c:0d:ab:9c:e7:3f:e0:85:5c:76:0e:84:03:82:81:1e:1a:02:
9f:d8:5f:d0:6a:d4:b8:87:15:bb:71:83:49:63:00:eb:20:04:
ef:2b:d2:59:ec:82:80:a6:3b:54:02:2f:c0:89:bb:30:f4:fd:
66:2f:00:cc:ee:90:06:05:7e:77:c1:36:97:55:dc:c3:c2:8f:
a6:05:fd:03:4b:25:6d:0b:09:76:16:4d:6b:a5:40:0c:ae:ea:
fc:25:32:65:6b:8d:3a:de:fb:8e:6a:b1:8c:80:c6:72:7c:ed:
12:a6:2b:95:77:42:56:90:80:bc:8d:49:78:28:a9:0c:5f:23:
10:71:4c:27:e6:b8:fb:95:8b:09:50:14:c4:e0:66:2b:57:15:
49:10:9e:b5:09:4f:d0:ce:65:6e:da:03:c4:b9:35:1d:e8:af:
34:9c:d9:d8:3a:36:8f:fa:af:0b:6a:c3:b7:04:81:56:bc:6e:
94:91:a9:6f:b2:df:c4:e0:f7:08:7d:63:fd:0e:f8:ce:65:f2:
9d:82:f1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:59:09 2026 by rpki-client