Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0G07JA0ytKB1baCVnQwWQMlK94.cer
File: m0G07JA0ytKB1baCVnQwWQMlK94.cer (raw, json)
Hash identifier: q5y9KPwTQITJxjx6zvGKr4HpuCVTl4eMmHzb0NJPfmk=
Subject key identifier: 9B:41:B4:EC:90:34:CA:D2:81:D5:B6:82:56:74:30:59:03:25:2B:DE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029766
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:34:27 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 142010
IP: 203.14.208.0/24
IP: 203.29.89.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169830 (0x29766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:34:27 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A915E39C, serialNumber=9B41B4EC9034CAD281D5B6825674305903252BDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b4:59:6d:bf:5a:9c:5c:22:ba:b9:2a:dd:9b:
09:ff:ee:f6:95:7c:b2:6e:b9:95:d6:32:91:06:00:
66:43:61:b5:a5:0b:b6:6b:27:bd:27:f6:34:b0:cb:
dd:86:51:cb:fa:74:df:10:72:07:2e:da:bf:70:c7:
d7:02:4b:6c:bd:3b:dd:a0:68:a9:ad:74:1d:b9:a6:
83:04:65:e9:f4:52:09:81:c8:47:de:b2:bb:49:4b:
89:06:38:df:f2:19:de:35:b6:ba:c2:f6:d7:e5:19:
89:20:e0:1e:27:b6:33:ef:91:f3:fd:57:f2:da:82:
15:a4:b1:8d:e7:dd:88:59:88:49:8a:1d:48:94:35:
d5:ae:54:f0:b3:c5:d0:37:1e:cc:41:c1:82:d8:f2:
46:54:9e:86:52:72:4f:52:6d:b1:b5:1a:32:9d:b7:
39:6d:4f:1b:ff:b4:87:da:1f:e7:f8:c3:a4:c9:57:
08:7c:b1:95:3b:ed:ef:36:90:9e:f6:90:34:eb:31:
53:2e:d6:07:f2:d8:77:e2:2f:23:89:f1:37:4d:66:
38:f8:6a:80:ac:32:bf:49:ec:bd:f6:19:5e:66:ab:
f0:9d:c7:34:f3:72:8f:ed:28:29:bb:8b:e4:d3:b4:
57:37:ee:7c:99:58:d0:38:80:39:59:f7:9f:a3:33:
71:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:41:B4:EC:90:34:CA:D2:81:D5:B6:82:56:74:30:59:03:25:2B:DE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142010
sbgp-ipAddrBlock: critical
IPv4:
203.14.208.0/24
203.29.89.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:86:b2:4d:0b:f1:b3:36:69:cd:a0:df:ac:08:56:68:f8:3d:
86:63:f1:69:d4:db:7e:38:90:d9:5e:e0:91:41:07:35:56:ce:
26:1b:df:c7:8d:db:78:52:f4:fe:a6:eb:d9:3d:88:33:0a:6f:
f6:6e:f8:a7:55:49:e0:28:2a:a0:e8:64:77:6d:d5:1b:4c:a2:
3e:b7:06:46:5c:d7:8a:61:22:20:e0:b8:a3:cb:17:37:59:ae:
db:95:7e:81:48:cb:cf:37:ba:a7:6f:46:ea:c4:fc:ea:2d:3a:
5f:63:05:b9:24:7b:b5:42:1d:15:c7:8f:2c:43:26:83:39:87:
58:c0:55:e7:a6:93:a7:a6:1f:3c:e6:6a:eb:21:d0:39:9a:e3:
fb:5f:27:da:a8:98:91:53:50:7d:d2:6b:a6:25:ab:9c:20:d8:
8a:cb:7a:00:11:a0:4f:63:f9:cb:8a:3c:ed:21:b8:cc:bc:39:
29:56:d8:5c:ea:5f:bb:15:32:7a:28:d8:95:c2:cb:00:9e:0e:
98:92:f7:9f:b4:3c:86:5f:e2:f8:f7:24:14:c8:df:ed:df:78:
5c:36:6b:e1:57:e6:fc:41:51:1e:f4:cf:e1:ec:79:5e:0b:ce:
78:05:b2:48:63:73:51:05:15:5c:86:c9:64:6d:19:14:98:dc:
f9:de:10:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:22:51 2026 by rpki-client