Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer
File: muAi3ZD6yvK8XHN26KhM5QUeiWo.cer (raw, json)
Hash identifier: rj6cZSik3G1XzYL4M1mxryabzViNRFmp/iy1CVqb0d8=
Subject key identifier: 9A:E0:22:DD:90:FA:CA:F2:BC:5C:73:76:E8:A8:4C:E5:05:1E:89:6A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029EE3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:08:40 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 134489
IP: 103.161.48.0/23
IP: 2407:1b40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171747 (0x29ee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:08:40 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A919271C, serialNumber=9AE022DD90FACAF2BC5C7376E8A84CE5051E896A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:5a:5b:8f:da:51:a4:9d:95:95:72:3a:b5:
e9:44:77:91:a6:99:57:7b:7f:0d:c0:e8:66:ba:78:
db:c4:ea:d2:01:f8:7f:54:42:8b:20:b0:1c:fb:1b:
cf:06:03:af:60:fc:66:e9:d3:de:d4:46:2c:50:31:
83:50:59:32:62:25:14:18:be:b5:87:fb:98:4a:01:
53:21:2c:09:62:55:29:40:93:21:08:1f:a9:09:68:
64:98:0c:9a:62:9b:e9:f7:67:38:e0:ce:50:6c:3c:
7c:71:27:49:ce:eb:f1:84:a6:83:dd:15:f6:3a:38:
f8:1a:fc:fb:28:86:35:a7:d8:38:48:66:a4:d7:89:
69:f6:71:a3:b3:3b:88:f8:9d:d3:e4:f6:fa:ea:3c:
19:41:3d:82:c5:bf:0c:e7:67:bf:72:02:81:91:c5:
82:83:4f:22:59:1d:24:91:c8:4e:8e:3a:63:1b:fe:
56:e3:15:70:b7:81:68:0b:1b:70:54:43:b9:89:b2:
cb:4a:08:9c:95:80:2b:8e:cf:46:a5:75:87:c8:af:
b7:59:00:73:8a:06:4b:97:23:34:cd:ce:c8:8a:15:
e3:38:30:7b:0f:f5:d6:b0:94:09:b1:1b:ef:02:44:
20:03:a9:d8:a1:d9:56:92:fc:90:cc:1d:8a:6d:f0:
6d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E0:22:DD:90:FA:CA:F2:BC:5C:73:76:E8:A8:4C:E5:05:1E:89:6A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134489
sbgp-ipAddrBlock: critical
IPv4:
103.161.48.0/23
IPv6:
2407:1b40::/32
Signature Algorithm: sha256WithRSAEncryption
a9:e2:d5:7f:bc:9c:96:95:3f:d4:2a:f0:cb:32:a2:81:42:18:
73:62:df:2d:ae:f7:96:fe:7e:87:5d:1a:ed:8f:a2:ad:5f:04:
ce:0a:a8:30:d0:cd:49:a8:c9:70:a2:b0:29:c9:ed:40:46:d9:
3d:9e:b3:70:f4:49:48:27:a1:2d:01:3f:de:04:46:76:0c:93:
19:bb:c5:8f:1d:87:49:15:b1:43:1c:fc:69:e6:55:d1:fb:4f:
d5:d5:71:04:12:4e:72:52:35:bd:dd:3d:07:62:9b:f1:8a:98:
71:2b:9d:d3:5a:47:18:ea:c3:2d:ea:ca:d0:49:83:c4:1c:0a:
d0:3f:88:89:aa:07:93:80:8e:ea:3e:e8:45:05:78:c3:95:f8:
a2:2f:1d:5d:4d:2b:2e:ba:12:58:25:7f:24:e9:52:33:76:19:
3f:28:15:fc:ca:4e:88:be:ac:68:a0:be:e3:fb:2c:da:7c:c3:
cd:c8:bd:f9:f4:3c:e6:32:a8:86:9a:e0:9b:29:74:a4:2a:0d:
ef:90:d3:b2:c8:53:13:72:f2:c4:6e:34:27:75:19:98:dc:e1:
b6:05:31:5a:c6:cf:9a:e8:ab:d2:22:c5:db:fe:45:b9:e1:85:
16:de:9c:61:55:4d:5f:61:ae:21:8c:a1:09:b7:a4:a5:85:88:
38:57:35:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:27 2026 by rpki-client