Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer
File: oiK21tBSghQiHUrOpH4axhHvQno.cer (raw, json)
Hash identifier: HqLH97wrBit8FQbHomXwi1fHLyyYEYex4pZnaQntr0Y=
Subject key identifier: A2:22:B6:D6:D0:52:82:14:22:1D:4A:CE:A4:7E:1A:C6:11:EF:42:7A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029D3F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:01:20 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 133762
IP: 103.108.180.0/22
IP: 2402:6e40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171327 (0x29d3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:01:20 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A911F177, serialNumber=A222B6D6D0528214221D4ACEA47E1AC611EF427A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:7f:a7:da:22:14:50:cc:d6:7b:b4:a9:97:99:
c3:f4:0f:2b:8a:81:61:bb:5c:54:2d:49:d8:87:16:
d6:88:84:98:df:a4:ad:ef:ee:a7:af:40:3c:94:ea:
c7:cc:9c:28:32:a7:4a:d8:55:36:13:d3:5f:3f:3b:
6a:f7:d1:90:3f:fc:14:e7:45:30:13:61:8b:e7:e1:
26:40:bf:c4:58:58:63:4b:3c:37:a7:58:02:1c:e4:
9c:da:72:4c:41:87:84:13:f9:23:26:93:ca:c6:6a:
55:9e:e7:d5:60:a6:23:e8:16:a7:53:e2:cc:3d:c4:
0e:25:a5:ac:ad:d7:31:e6:55:e8:b4:29:34:76:69:
a3:f8:22:ed:d5:92:3d:73:02:4b:d5:e7:09:e1:1d:
59:94:c3:a4:ad:f4:b3:e1:fe:80:83:f7:6b:d1:a2:
4e:00:12:5d:4f:1f:f2:16:1a:70:f3:96:c3:8e:c9:
64:b0:f1:1f:0a:73:5d:1a:71:fd:50:b8:e0:4e:5a:
cf:dd:5c:e7:f5:d2:21:74:0c:34:46:24:23:4a:b5:
08:e2:8e:38:f2:cb:ab:0c:9c:8d:09:37:ad:20:78:
f6:06:f5:5e:b9:45:b2:21:7f:a2:ba:1d:d3:c4:4c:
75:78:b6:0c:cd:a9:59:a2:1a:ad:71:18:56:5d:df:
7d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:22:B6:D6:D0:52:82:14:22:1D:4A:CE:A4:7E:1A:C6:11:EF:42:7A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133762
sbgp-ipAddrBlock: critical
IPv4:
103.108.180.0/22
IPv6:
2402:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
a5:f2:16:f5:a6:a3:2f:5b:e3:0a:6d:b1:7c:fd:18:fa:76:4f:
17:80:6b:35:0e:e2:d5:67:40:46:36:f8:5b:73:da:91:a7:76:
38:8e:61:b1:da:59:49:cb:83:b0:58:13:13:59:46:e4:52:75:
f3:e7:9e:20:7c:74:16:22:e5:09:62:dd:2c:01:49:80:84:16:
52:c9:c5:a1:9d:f1:1b:3e:00:5d:e0:97:82:d1:78:43:ac:db:
9d:c6:e3:64:87:e2:af:fe:d9:1f:e5:6f:26:32:5e:c4:f4:fb:
2f:88:23:25:74:1d:07:a9:98:86:26:0b:e5:4a:b5:8b:1d:c2:
44:2d:f9:47:46:94:4f:d1:36:78:ef:84:e5:4e:4f:70:7a:2b:
34:76:ea:43:63:86:36:97:bb:fc:36:ea:b9:68:c1:5a:61:7b:
ac:bd:6a:70:1e:9a:ef:d8:bc:39:2f:c0:9b:4b:4c:d3:2d:65:
f6:50:91:90:2f:9a:90:b1:e1:9c:d2:79:b8:d0:5d:d2:d7:28:
d5:0b:62:13:ee:ff:1a:0c:fc:66:3e:e6:e6:3d:f7:a9:5c:76:
25:92:2f:20:9b:0a:2d:3b:0a:2b:b3:51:15:b2:4a:d9:ba:51:
15:28:37:8d:40:60:f3:40:40:0d:7f:b2:d1:aa:1c:93:3e:57:
ef:df:0f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:48:55 2026 by rpki-client