Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer
File: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer (raw, json)
Hash identifier: 8kv1PGFZpuGUPXxPMRaP8VeVo6V3kdbL3DlLo802clc=
Subject key identifier: BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029A09
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:46:54 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 136146
IP: 45.114.124.0/22
IP: 103.81.168.0/22
IP: 2400:7ac0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170505 (0x29a09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:46:54 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A917B503, serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:37:1d:6a:fd:15:00:99:c5:e1:58:e7:d5:
44:08:ec:df:be:38:27:54:28:45:ff:b0:17:a5:0f:
d2:67:b6:e6:f5:55:98:39:1f:b7:60:d3:8e:34:a6:
90:d7:7b:97:73:66:6c:4e:a6:31:b8:7d:ae:1e:32:
ce:cb:58:d3:16:0d:97:76:a3:ee:a8:31:4d:b8:c4:
26:00:00:14:ea:b2:1d:b8:27:51:48:b6:07:43:fd:
88:61:bb:83:0d:3d:8e:f0:39:12:7d:a2:fa:ac:6a:
8c:79:dc:05:77:fc:0a:07:7c:10:ba:76:a6:b5:d9:
64:51:25:f1:24:60:6f:e8:3b:c7:5d:31:a9:0e:2c:
e2:b3:d0:f3:87:ed:36:6b:54:ac:68:79:18:fd:1f:
2d:7d:77:e3:94:69:e9:fc:0a:33:3f:29:de:13:90:
30:2d:fe:52:6e:33:63:84:be:8e:47:2e:cb:16:c3:
c0:ef:9c:71:f2:e5:6d:6e:ae:2b:14:b2:81:51:93:
39:58:e3:ff:b4:c9:a6:86:da:94:5e:fa:83:50:aa:
ba:8c:58:d7:9c:7c:7d:3d:e6:5b:d4:14:05:49:96:
b4:86:32:ba:2e:a2:99:94:be:6e:fd:63:de:b4:b3:
29:00:7f:fb:66:be:bb:1b:1b:ce:57:ff:4b:82:c3:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136146
sbgp-ipAddrBlock: critical
IPv4:
45.114.124.0/22
103.81.168.0/22
IPv6:
2400:7ac0::/32
Signature Algorithm: sha256WithRSAEncryption
6f:e7:a9:9f:fc:cc:63:8c:9f:47:e7:e3:2e:8b:73:3c:2b:25:
9e:e0:8e:d0:bb:15:f3:b8:e2:31:f5:ce:a0:95:9b:24:a4:48:
35:82:dc:df:ac:45:d1:7b:27:05:c0:8e:0c:45:73:49:0f:45:
2d:d6:b2:36:a0:48:31:c7:04:49:80:48:90:da:39:37:de:31:
3e:7b:c8:4e:66:24:63:d9:0c:7a:f6:d8:de:59:a0:40:93:75:
93:d1:ca:a4:4c:ae:e5:2c:77:29:2c:c9:87:6f:a9:c4:3f:80:
ec:68:46:f3:46:cf:24:91:6e:ab:62:e3:8f:4b:e0:12:8b:93:
ce:c7:e9:b0:3b:85:4a:78:6f:0e:ae:47:2f:ac:08:10:50:0f:
29:2d:72:dc:2f:f5:2d:b1:9c:4f:13:c0:a3:9b:fe:87:d4:23:
84:05:0b:7c:92:78:20:cc:c6:75:7f:1f:cb:46:db:97:2e:7f:
00:b1:9e:af:6d:e1:43:9f:82:2f:4c:9c:f6:64:8e:eb:9f:93:
3d:2b:9e:7e:e1:04:96:a9:ec:60:e4:96:32:7a:87:67:3f:a6:
24:81:dc:17:ed:85:77:b1:b6:95:bd:f8:e8:82:2d:5b:f7:90:
ad:78:e8:4d:8e:14:65:d3:0b:f7:58:50:cf:0b:c7:43:ca:58:
af:ad:e2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:42:23 2026 by rpki-client