Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umbyZbiRG9ItoRaulw1wnTIGQK0.cer
File: umbyZbiRG9ItoRaulw1wnTIGQK0.cer (raw, json)
Hash identifier: taKfN8XzuMft/kG5aBPwMt37zZ2GxwaF5Vhjd1lztDU=
Subject key identifier: BA:66:F2:65:B8:91:1B:D2:2D:A1:16:AE:97:0D:70:9D:32:06:40:AD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C7D1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9195B3B/52D1F40C8A2111F1A0CBBFFD6911F970/umbyZbiRG9ItoRaulw1wnTIGQK0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9195B3B/52D1F40C8A2111F1A0CBBFFD6911F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Jul 2026 01:12:00 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 131904
IP: 103.5.64.0/22
IP: 103.204.64.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:35:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182225 (0x2c7d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 28 01:12:00 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9195B3B, serialNumber=BA66F265B8911BD22DA116AE970D709D320640AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:72:00:88:2f:7d:37:9f:47:d9:46:fb:f4:
b3:45:48:43:c3:fc:21:2f:99:11:00:f5:d7:c5:f7:
50:5a:52:aa:34:95:ba:53:9c:8c:38:ba:9c:db:59:
96:36:5a:62:4d:16:24:54:2a:48:db:d2:14:18:83:
55:cf:6b:cf:c8:72:3d:36:5c:9b:c7:32:8b:0f:a5:
1b:61:ce:e2:3b:cc:15:7a:ae:ab:bb:90:d5:54:b3:
43:49:75:cc:fb:23:8f:3d:2c:0d:54:78:91:b5:bb:
3a:58:02:d5:e6:25:99:47:a9:b7:fc:65:ef:6b:94:
71:c7:0e:59:b5:49:f2:68:0d:b9:61:c9:4d:63:bf:
b5:39:60:59:5d:41:e4:43:75:a4:0f:eb:f7:38:65:
d6:bd:bf:e8:4d:e6:fe:80:e4:dd:08:d4:e2:e3:6d:
b0:5b:11:28:dd:1a:6a:2c:e9:d2:75:43:dc:81:dd:
22:39:1c:e2:a3:c8:e1:5e:23:74:9b:a5:8a:c8:2a:
4d:71:f0:c2:63:89:65:9b:82:d3:86:6c:f9:0c:c9:
fc:be:67:9d:10:db:a8:c2:96:9e:73:41:7b:16:7d:
cb:e2:50:95:66:26:72:fb:4d:c4:f0:6b:7f:18:aa:
2f:d5:c9:8a:69:e5:d4:11:de:8f:75:ed:72:4a:cb:
0f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:66:F2:65:B8:91:1B:D2:2D:A1:16:AE:97:0D:70:9D:32:06:40:AD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9195B3B/52D1F40C8A2111F1A0CBBFFD6911F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9195B3B/52D1F40C8A2111F1A0CBBFFD6911F970/umbyZbiRG9ItoRaulw1wnTIGQK0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131904
sbgp-ipAddrBlock: critical
IPv4:
103.5.64.0/22
103.204.64.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:48:c5:ae:ee:37:7c:ff:66:21:56:d0:8d:ce:45:88:4e:18:
a6:40:86:fa:6b:f2:6b:5b:66:dc:a5:eb:38:2e:50:b3:1e:59:
e4:24:66:90:2a:02:a0:e4:85:0b:9a:8c:20:4a:36:d4:6b:8f:
b4:8b:f9:55:d3:2f:7e:f1:11:e1:6e:a9:d6:69:70:c9:1a:56:
64:ab:0a:2e:92:f9:b8:b3:94:7c:c5:ae:ee:b0:5d:8a:f1:db:
77:43:75:b7:66:e8:c3:a5:72:e8:f7:bf:f3:f0:0e:32:f3:4e:
68:93:d6:61:26:28:21:33:9f:f0:50:f4:50:1b:5d:06:6f:c5:
63:53:1b:87:bb:e5:9a:b7:67:76:c3:9a:53:88:7d:1b:7a:3f:
2d:ee:f9:c0:f7:7d:50:d7:d3:48:3e:cd:9b:65:d8:82:c3:b3:
21:7c:af:79:30:1b:1b:ec:c5:f0:c2:35:b4:e2:08:65:7a:a0:
84:10:4c:0b:80:0a:d7:0f:e5:2a:56:fc:39:ec:24:b7:42:44:
d1:9c:bf:87:d4:05:f9:24:39:5b:b6:95:b5:b9:26:e3:74:2d:
67:a9:4e:f3:b5:24:5c:2e:47:2f:e4:35:48:40:dd:1d:e2:49:
12:8e:fa:28:f5:f2:95:96:64:91:53:9e:dd:c2:56:16:2d:5b:
02:cf:c6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:58:43 2026 by rpki-client