Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
File: woh5_sEM6SnBzy5bl4hvHX6hfFo.cer (raw, json)
Hash identifier: IeQDNoTbhoJS1qYSioI/xP2fA6WULK/InvXwc4xXqfM=
Subject key identifier: C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AB12
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Apr 2026 14:19:12 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 136395
IP: 103.86.108.0/22
IP: 202.181.4.0/22
IP: 2400:bcc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174866 (0x2ab12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 8 14:19:12 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91B6EB1, serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:33:3e:44:56:ac:d6:5e:06:2c:f3:04:29:
cc:ec:77:69:a7:67:51:fc:00:46:7a:1e:2e:7e:36:
d5:3d:0e:68:ec:b7:99:f3:9a:e9:ed:30:63:42:d1:
65:fe:8e:51:e9:1d:ed:fd:5d:44:09:e1:20:10:7a:
1e:e3:25:ad:ca:18:cb:f5:ca:b1:4e:31:e0:5a:79:
c6:e7:27:11:3c:80:7a:70:40:10:1d:35:d1:50:88:
27:cd:91:1e:57:44:1e:55:fc:67:83:a7:a6:c4:59:
17:78:cf:a6:19:35:67:ab:1a:ed:8b:49:e0:cc:27:
0a:86:e2:ae:94:b8:0d:d2:59:44:40:07:f3:5e:8a:
2b:f8:9e:12:04:ee:27:62:06:ed:b4:dc:7c:1b:d0:
34:3e:c9:f4:62:d9:78:49:55:cb:5a:b3:c8:3d:8b:
a4:00:a5:7b:20:ef:d4:84:99:f9:34:3c:52:65:79:
e1:1b:06:d1:38:31:59:79:0e:1a:3f:c9:4d:6a:7e:
e9:c3:fc:09:45:b7:6d:fc:9e:a1:e7:63:4c:ed:08:
44:c1:ae:2d:77:21:d6:ec:03:2f:7e:e2:e1:c5:4e:
8c:30:98:b4:48:13:49:2c:12:9e:cf:ba:49:b6:90:
52:d9:ab:25:f0:6d:9b:da:15:50:72:31:56:a0:e3:
04:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136395
sbgp-ipAddrBlock: critical
IPv4:
103.86.108.0/22
202.181.4.0/22
IPv6:
2400:bcc0::/32
Signature Algorithm: sha256WithRSAEncryption
0e:22:c5:20:7a:13:30:d1:2f:56:c0:e5:2e:34:0b:51:47:3c:
69:56:40:95:39:39:c2:14:f5:a1:04:7b:1a:63:22:ce:66:c6:
4c:42:63:a9:88:59:f9:49:0a:cf:ab:ae:5d:53:8d:8a:cd:85:
79:41:90:50:cb:8b:75:c7:98:87:00:cc:8e:29:e1:3c:17:03:
47:41:92:db:95:02:e9:e1:c2:d0:30:28:eb:4f:d5:34:f0:bb:
42:08:9e:8e:27:df:de:47:49:d2:70:19:33:70:de:07:19:86:
f4:8d:a6:0f:2a:f1:52:5b:5a:c0:ae:0b:a2:ea:8a:66:5b:2a:
cb:1e:d0:ea:fb:b3:5f:67:01:17:82:9f:a4:76:76:46:56:61:
89:fd:15:2f:43:30:f9:4e:12:93:69:29:04:02:f8:70:ca:7a:
4e:ef:3c:a9:63:a8:f7:6d:b5:12:8f:84:e1:79:6a:e4:9a:4b:
12:e9:82:58:12:45:9a:35:34:7e:c1:cd:f4:c4:53:54:a9:33:
16:29:55:38:04:7d:70:17:45:45:5a:cf:ee:ec:16:c6:c3:29:
7b:ea:d5:a5:bb:87:1e:5a:6a:0c:94:41:2f:80:5c:7f:19:52:
f1:b3:5b:96:ea:13:8c:bd:7e:52:e1:3b:8a:a6:27:53:f8:09:
59:3b:55:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:26 2026 by rpki-client