Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQfxHRNjrFs5Lzb17zgixc_NaPk.cer
File: lQfxHRNjrFs5Lzb17zgixc_NaPk.cer (raw, json)
Hash identifier: ku1rDa5FQQFETT+EjCRwcN6lKYgAcGHQPHyyrpRYFaU=
Subject key identifier: 95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CBB0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 06 Aug 2026 14:10:27 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 149869
IP: 103.189.194.0/23
IP: 2001:df0:d940::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183216 (0x2cbb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 6 14:10:27 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91EE8AC, serialNumber=9507F11D1363AC5B392F36F5EF3822C5CFCD68F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:5e:b6:94:76:3f:96:a2:d9:17:1a:f9:57:
14:19:f2:84:1e:33:85:d2:29:e5:a4:36:2e:a4:c3:
15:3a:9c:64:6b:3a:9c:7d:af:b1:c5:28:92:41:a1:
b2:8a:fe:45:3c:02:05:99:64:3b:5c:54:e5:16:6b:
a1:8c:11:c0:3a:c0:5c:00:46:fc:c2:ee:37:71:e0:
96:b8:cb:0d:58:4f:d4:89:7f:35:16:f7:2b:c6:64:
9c:3c:c6:87:94:d6:32:ff:3c:9b:ab:02:53:10:6c:
aa:76:e5:85:02:36:70:17:fd:bd:c8:ec:5b:61:fa:
0b:3c:f0:29:04:b9:89:d1:71:19:7b:0d:08:78:61:
33:19:6a:61:6a:7d:62:6d:99:aa:0b:f7:09:58:f6:
93:d7:4e:de:fa:d9:2e:42:88:18:35:de:01:79:06:
62:43:ac:e6:5d:1b:0d:46:a6:53:f4:97:5d:54:79:
af:ee:5f:cc:52:b7:98:05:24:3a:d6:3d:b1:5a:72:
01:3d:57:b5:c8:78:97:d7:42:5b:57:21:e9:b6:29:
d1:b5:94:15:1c:fc:17:f9:46:64:7b:59:94:2e:9b:
7e:fc:db:e7:74:ed:00:c4:0a:2f:3a:f5:6d:32:70:
4c:09:e8:5c:98:5a:a8:26:2a:85:fc:35:eb:43:84:
f4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:07:F1:1D:13:63:AC:5B:39:2F:36:F5:EF:38:22:C5:CF:CD:68:F9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/lQfxHRNjrFs5Lzb17zgixc_NaPk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149869
sbgp-ipAddrBlock: critical
IPv4:
103.189.194.0/23
IPv6:
2001:df0:d940::/48
Signature Algorithm: sha256WithRSAEncryption
d5:d6:7a:20:1c:6c:cd:f7:0f:7b:34:fe:dd:a0:a8:2e:e7:de:
26:8d:2c:83:d2:1d:ec:69:3b:90:9d:6b:c6:2a:bf:9e:7c:07:
8d:e6:64:40:f2:47:d4:4d:55:43:70:29:8d:12:51:26:c5:31:
f1:1e:a8:49:9c:9c:3f:02:5f:1b:3c:b8:37:d6:8f:5a:32:1b:
0a:3b:08:e6:bd:f6:2b:b1:28:d9:43:ed:c8:f0:df:54:d1:4b:
ca:20:07:3e:06:53:94:ab:49:c2:16:26:fd:0c:1b:b5:23:1c:
e6:c4:09:bd:1e:97:e4:64:7c:e2:cd:c9:e9:a1:f1:42:61:e6:
1a:bb:b2:9c:79:21:80:b5:b9:df:1a:51:b2:9b:d1:3f:67:ca:
f2:0d:25:9e:97:a6:a9:a6:38:18:7b:50:69:26:b8:8e:b8:82:
23:5c:b3:db:80:55:f3:fb:9d:c9:81:fb:17:8f:2e:1c:c2:6f:
30:7d:46:dd:e8:03:dd:6b:af:eb:04:91:44:16:7c:06:78:0f:
b6:93:5f:03:75:c5:e3:3b:c6:70:aa:d4:d8:68:69:16:e9:d8:
01:e0:51:05:c8:6b:72:4c:c7:67:7d:2d:6f:24:8a:30:46:cc:
0b:37:39:90:ab:4a:17:94:ca:7a:d0:21:61:c0:61:1e:27:db:
08:78:40:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:50:18 2026 by rpki-client