Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer
File: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer (raw, json)
Hash identifier: UtiP1F/x8BMcwbNOwuz4t863qqt2PEgLRBBYXuCRKV8=
Subject key identifier: 93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029B72
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:52:56 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 18155
IP: 103.161.216.0/23
IP: 2407:840::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170866 (0x29b72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:52:56 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91DE323, serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:20:46:49:23:15:ee:5c:45:0d:db:fc:23:51:
e3:17:1e:a9:f2:7b:eb:4c:fe:dd:ba:ec:a6:4d:9a:
f7:e7:26:ba:4b:51:1e:8b:c6:c2:2d:b8:74:90:a0:
b3:3f:d4:1c:fd:37:4c:42:05:0e:ae:8b:d0:5e:cf:
62:10:dd:53:e3:46:35:fa:0f:80:10:29:79:45:94:
ff:e5:6d:c7:83:a8:4b:8b:c0:e8:8c:0e:a9:92:88:
ed:da:22:3a:8c:c1:3c:5b:bb:0c:4e:d2:8e:4b:b4:
a2:ab:73:8e:f1:50:dc:fb:08:96:9e:0b:bb:d7:4e:
c4:f8:83:0d:63:b9:8c:eb:36:35:50:89:17:2e:8c:
a0:e4:a9:8b:78:52:7d:44:ca:87:e2:5c:8e:f5:4a:
69:51:c7:b6:3f:89:fc:38:25:02:df:4c:16:0f:6d:
9e:29:ad:79:1f:5c:0e:0b:a5:c6:1f:7b:b7:63:e8:
f8:9c:2e:c4:02:7b:e0:d0:16:8a:ab:72:0f:e5:d0:
53:58:ad:f1:7f:bf:c3:ed:b2:80:11:f1:85:b6:59:
95:c7:e2:b9:75:c0:3b:b9:2d:65:dc:f5:2f:63:b6:
fe:f6:1d:6d:76:14:c0:f3:88:b2:ff:22:37:9e:fc:
05:b7:28:1d:aa:4a:e1:d8:e8:68:36:00:b7:65:bb:
33:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18155
sbgp-ipAddrBlock: critical
IPv4:
103.161.216.0/23
IPv6:
2407:840::/32
Signature Algorithm: sha256WithRSAEncryption
1f:b6:a3:55:dc:0c:ea:ce:8a:ea:00:3c:a5:05:19:62:d5:82:
e5:11:52:ad:f7:e1:4e:0f:d3:90:55:f3:d8:ae:31:9f:6f:b7:
01:0c:53:27:41:fb:04:71:2e:5c:a9:c6:63:b0:9d:4a:83:aa:
c1:8d:a1:9e:e7:ed:f7:d4:24:11:f9:fd:a8:c3:9f:5f:a9:cc:
45:9e:87:82:e5:2d:6a:67:68:92:f9:44:c8:0b:b1:e7:5e:56:
1f:6e:b9:c5:8d:9e:e1:81:b0:e4:ce:63:58:53:ba:2b:03:7f:
80:dc:37:d5:97:b9:63:8d:04:bd:20:1c:db:2f:e2:f1:e9:bb:
fa:fa:27:83:6f:bf:a7:1b:30:3c:40:57:15:0a:a0:d7:3e:cf:
c6:d2:f2:f0:c6:0f:6c:54:6e:b6:c3:52:36:b5:14:f2:98:52:
4e:e8:71:5d:2a:5b:83:d9:6d:04:5d:00:8d:66:fa:e9:a3:5c:
61:73:1a:a7:f7:a8:66:0a:7c:e1:ae:9a:6a:2e:c6:cb:5a:ac:
f1:83:c4:db:9c:92:35:6c:14:21:42:f1:42:15:d2:83:e2:c1:
28:9b:4b:d5:be:d2:b1:38:1e:7b:57:48:8e:59:43:34:66:38:
98:aa:b1:38:00:37:b9:f9:67:fa:3f:20:e6:fc:7d:96:9e:6c:
e9:11:97:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:45 2026 by rpki-client