Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer
File: s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer (raw, json)
Hash identifier: E2B1u0jt/PP8OuG1TtU6XpxpyRGd2J5kajgVwnpj/i8=
Subject key identifier: B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CF21
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 22 Aug 2026 13:24:41 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 139338
IP: 103.141.123.0/24
IP: 103.141.132.0/24
IP: 2001:df0:fc80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 17:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184097 (0x2cf21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 22 13:24:41 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A9199231, serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8f:f1:e5:26:c2:bb:a2:2b:a4:6f:78:0e:a9:
b9:54:e4:ca:9c:7b:d9:42:52:96:d9:54:c7:d3:43:
8b:60:c5:b1:94:79:0f:ed:7f:64:74:22:88:6e:b6:
e4:d3:05:79:69:94:09:9e:48:26:af:6e:c2:38:10:
9c:03:e2:21:eb:b0:d6:a9:8b:32:68:a9:73:ac:8f:
7f:fb:b2:97:6b:fd:90:e0:c8:e9:34:90:e1:95:6d:
1b:87:4d:67:ab:e4:34:d7:04:f6:38:49:61:b1:b6:
43:51:d5:ca:38:9b:51:36:47:51:4d:96:46:b5:59:
e3:9a:67:f3:4f:54:e8:1a:6a:88:83:5f:8e:83:b8:
83:33:0e:1a:d4:78:58:ea:e9:df:a7:ca:4c:b3:4f:
f9:97:96:65:83:74:04:7b:71:a5:b0:e6:11:cb:c3:
5d:95:66:7f:b0:f1:1d:e9:ff:91:fa:22:42:c7:f3:
c9:f2:16:ee:f8:a8:ad:0c:ee:05:66:92:78:00:76:
b4:8c:ec:72:53:90:83:1c:97:3a:b2:ac:6c:bf:c5:
59:77:39:26:cf:7b:64:24:0f:58:cc:4d:ba:24:34:
ab:d2:78:44:c9:e0:b4:5f:83:e7:77:62:1a:1f:d4:
3b:fb:a8:2b:a8:22:78:89:75:04:65:6f:f6:62:29:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139338
sbgp-ipAddrBlock: critical
IPv4:
103.141.123.0/24
103.141.132.0/24
IPv6:
2001:df0:fc80::/48
Signature Algorithm: sha256WithRSAEncryption
92:7b:42:11:2e:d3:a0:67:0a:dd:13:1d:e4:67:b4:1b:32:4e:
5b:6d:3d:03:03:8b:b1:ac:57:d9:a7:f6:d8:01:6a:73:03:88:
4f:a4:aa:ef:37:10:b7:31:0c:d1:43:c5:7c:cc:58:f6:90:83:
c1:c7:3c:22:75:06:bf:15:99:00:fb:70:fd:19:f2:78:ee:12:
4c:19:6a:b2:cc:5f:ad:74:2f:b2:21:07:fe:2b:08:b0:71:81:
40:45:d0:9d:a4:1e:84:40:c3:3d:d3:bb:16:9c:4b:60:60:af:
a9:56:80:c8:b8:12:6a:04:81:91:f9:07:90:b0:67:1f:3d:d7:
84:27:53:1a:6f:64:2b:2f:53:b3:f7:2f:fd:ca:2f:45:35:2e:
68:61:8f:6c:32:ac:7f:1b:90:8c:4e:31:ce:04:ec:ea:f0:de:
ac:a1:72:8b:f7:e4:60:73:6f:58:54:83:50:b1:17:8b:94:39:
8d:41:64:31:de:9a:e2:a9:0c:85:c2:ac:b0:27:f4:6b:38:e3:
70:4a:c8:5f:e1:18:f5:14:bc:0a:1a:34:f2:d6:5b:4c:b1:de:
29:17:5f:74:4a:ac:92:10:af:e3:f6:6d:ca:47:9c:28:d0:da:
53:9a:a7:3d:bd:3a:2c:f9:f9:35:b7:cc:b0:bf:d2:03:15:82:
a1:a3:c2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:20:08 2026 by rpki-client