Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer
File: ko6KqA2ZpyP2qQIa5eewMqzt23o.cer (raw, json)
Hash identifier: IxKXIFFt7b0VdESef+RkaDBpb4TIFDRRltTjgADqgEk=
Subject key identifier: 92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0299C7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:45:38 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 38722
AS: 55343
IP: 103.227.2.0/23
IP: 202.4.191.0/24
IP: 202.8.30.0/24
IP: 2001:df3:1b80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170439 (0x299c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:45:38 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A9135A27, serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1c:ff:81:30:81:c2:d1:08:6a:35:b8:d6:ec:
92:16:65:91:85:20:8e:8e:13:94:07:87:77:12:91:
ef:3c:1b:d3:8a:fd:49:5b:05:fe:73:01:7c:21:d4:
b4:d3:e3:bc:ca:90:b3:5e:39:7d:e0:90:2b:aa:3d:
46:50:13:cc:bb:27:29:02:57:be:3d:2b:5f:f0:83:
99:c7:c2:d1:14:d6:6e:72:8e:e5:16:93:af:80:41:
30:b0:ce:50:00:27:cc:f8:dd:fe:c6:fb:3b:23:b4:
c0:9f:8a:7b:30:55:ef:db:5b:45:cc:51:12:5d:1d:
b2:a1:ee:d5:0b:85:15:b7:84:05:a4:62:64:e1:97:
da:a9:06:28:76:6a:f5:53:a2:9d:01:f7:74:15:4d:
01:6e:ac:76:68:b2:c7:ae:04:51:76:a3:e4:a2:5d:
bf:99:c5:38:fa:b5:12:50:b3:64:08:89:f3:50:91:
47:0e:68:6a:00:10:77:1f:20:44:66:77:e2:07:41:
13:e2:19:d4:04:1f:f0:da:ef:2b:7b:cd:59:d5:c2:
3f:8f:bc:db:2c:a8:f7:74:0b:c2:07:8f:86:09:fd:
56:75:fd:c6:d8:99:7a:a1:0e:2e:51:ab:9d:35:cc:
74:68:7c:b0:14:23:c0:fe:2b:93:a2:78:2b:a1:a1:
83:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38722
55343
sbgp-ipAddrBlock: critical
IPv4:
103.227.2.0/23
202.4.191.0/24
202.8.30.0/24
IPv6:
2001:df3:1b80::/48
Signature Algorithm: sha256WithRSAEncryption
49:34:4d:3c:5d:7a:65:49:6e:73:20:ff:0b:fa:b6:99:19:2a:
76:3c:4d:4a:6f:77:70:40:5e:41:6e:7d:9e:04:bf:06:6f:31:
6e:f0:12:cd:ac:41:85:6d:34:8d:cd:90:3c:f3:1e:aa:bc:7d:
53:6c:ff:ea:c8:c6:a3:40:fb:7d:6a:bd:3e:ea:da:3f:2d:08:
fe:b1:be:2c:32:93:b2:07:26:6c:13:d6:91:20:37:9d:05:35:
59:cf:74:a0:8f:d9:74:42:49:13:cb:03:e4:0e:89:bd:7b:f3:
b4:e2:df:06:23:b6:a3:16:65:24:9d:2c:7d:6a:a7:1e:ba:29:
0e:07:3f:a9:1e:8a:82:48:5c:b8:2d:1e:01:9a:56:41:31:0f:
8e:35:b1:39:74:f0:bc:18:79:de:3e:4d:53:c4:4f:79:8b:9b:
f8:ad:8a:56:6f:49:34:99:32:6f:7c:9e:be:26:79:61:b6:97:
ca:fb:b9:91:4c:58:49:c6:04:d0:f2:21:25:d4:4e:35:d8:e2:
31:68:1a:bb:ae:da:6a:34:d8:3e:08:39:b8:6f:07:a4:63:9b:
9a:1e:24:e9:20:64:fd:7e:d7:bb:92:1c:7f:86:ed:1d:d6:24:
ff:0f:a6:c2:d5:5d:5a:17:2e:fb:f6:70:3b:a4:01:6c:3b:e5:
8e:e0:96:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:21:41 2026 by rpki-client