Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
File: lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer (raw, json)
Hash identifier: bcckQ6w95C4iNra9RuH2uVouhqT4eW/6I3d69s0hkwY=
Subject key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029F39
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:10:14 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 149026
IP: 103.176.218.0/23
IP: 2400:35e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171833 (0x29f39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:10:14 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91B075B, serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:53:dc:a8:1e:05:77:06:e6:2d:6a:a3:58:
70:c5:2a:e8:f7:ff:62:6f:28:bc:8c:ad:2c:42:5d:
9c:1e:0f:1e:e6:37:50:02:63:a0:dc:96:42:d8:94:
27:47:8c:1f:4b:d5:a5:37:11:6b:1b:59:5b:98:47:
be:28:fa:8e:87:18:17:65:81:fd:ef:ac:cb:22:e8:
4a:c7:08:e1:1d:b2:5a:17:8a:8b:48:01:8e:16:e4:
03:0e:40:8a:9f:71:53:71:f1:31:34:ea:6e:bc:b2:
9f:04:1f:46:d9:4d:0e:07:c5:fe:3d:25:5a:b9:16:
cc:f6:45:8f:4a:b2:55:da:32:17:13:97:68:06:63:
5d:60:22:3c:47:7c:df:2f:b7:4d:70:69:5a:3f:b6:
48:c0:17:a5:46:83:8d:82:a3:fe:5d:85:1a:0a:ec:
04:47:b1:0e:d9:91:09:60:35:47:b5:ea:c4:d1:3a:
a5:ea:94:00:13:8c:d9:94:06:f6:df:13:45:17:e2:
45:d4:d6:e2:bf:69:e1:0c:6a:c4:98:99:d1:9d:af:
fe:d5:c9:0c:6e:8b:d3:4d:e1:aa:b5:5b:06:4b:e9:
24:a3:d8:48:0d:b2:3d:52:d9:1a:88:d5:b4:02:24:
63:ab:6d:1e:e8:e6:37:73:59:e8:85:37:c7:95:3d:
a2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149026
sbgp-ipAddrBlock: critical
IPv4:
103.176.218.0/23
IPv6:
2400:35e0::/32
Signature Algorithm: sha256WithRSAEncryption
90:0a:00:ca:f6:8f:e8:51:be:07:33:37:56:c1:68:ed:53:6d:
cd:13:b6:37:14:56:cd:28:cb:c4:89:56:d5:c5:e2:8f:d6:ae:
1d:f0:89:55:99:71:b3:f6:62:d2:b6:87:19:6c:e8:8c:e5:14:
f8:50:40:aa:ae:78:46:a1:e0:6a:c0:b3:49:b1:7b:9c:3b:64:
06:90:12:c3:a6:51:8e:80:cd:2d:f9:28:c0:ec:47:b7:41:59:
0e:4e:8b:a9:3b:a1:6a:d7:53:31:31:2b:3d:86:cf:1d:d6:8a:
43:99:f8:ed:95:2e:a4:0f:9a:ab:f3:b6:71:ab:bf:7f:a1:64:
f9:4f:84:55:b9:4f:63:f9:78:bc:0e:7b:e1:c8:5d:60:1d:2b:
22:6f:02:d2:50:0d:6f:8f:9b:3f:ab:64:7b:d9:77:d9:09:03:
16:a0:93:38:c7:6f:77:86:1b:0c:8c:06:13:be:51:ea:b6:14:
5d:ad:de:96:8e:09:91:2e:19:e2:e8:df:b8:1b:25:77:0e:0f:
f6:5e:f9:e4:c2:aa:f8:b9:34:b7:27:26:8b:45:e6:7e:0f:c1:
65:2e:4b:35:85:17:f9:2a:1b:c1:26:2b:e4:d1:92:66:84:80:
cd:c9:a3:1f:6c:94:37:d1:e0:8f:19:e0:bc:32:d4:a5:a3:10:
0e:09:c1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:48:48 2026 by rpki-client