Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer
File: x7AAT_axhojBl7xLOfrBJdSfvPk.cer (raw, json)
Hash identifier: ze1BeQjfkIcr+m65SHDjJLYq9LuGY5eq+tNQ993E93w=
Subject key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D67F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 16 Sep 2026 13:10:50 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 146991
IP: 103.172.141.0/24
IP: 2407:d4c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185983 (0x2d67f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 16 13:10:50 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:3d:30:22:09:5f:e2:c4:c7:31:87:07:76:
cd:a0:98:bc:95:0a:24:c6:2b:b2:f5:6e:85:29:10:
a3:ca:bc:74:ba:9f:29:17:8c:53:18:1e:00:95:3d:
60:20:53:7d:c5:ef:c1:17:11:56:71:bd:8c:26:5c:
6b:6e:c5:48:de:3e:57:9b:f7:04:20:ec:34:26:ad:
65:f2:de:d6:97:7c:8a:03:b8:f3:c0:f3:a8:d3:6b:
27:3e:c7:8f:4f:d9:a6:ed:2a:bf:fc:14:c0:c1:5e:
6c:d8:c4:9d:3f:f0:06:55:fc:69:19:36:13:a0:1c:
00:d9:78:b3:ce:cb:53:21:01:04:ee:5f:0a:b1:31:
d9:ec:b0:bb:c5:3c:82:b8:7c:c4:51:55:a4:a8:d4:
96:0d:fa:11:78:3e:d5:e2:b2:04:8c:2c:18:66:66:
1c:f9:f9:47:75:03:64:55:66:fc:04:1b:3b:e2:de:
83:fa:7c:54:bb:bc:6a:ca:6f:d6:17:b5:70:c3:87:
db:ef:84:47:20:9b:e2:56:ca:b3:2b:b8:33:15:4e:
52:04:7b:29:7e:83:13:1d:f7:24:6e:d2:d0:a4:b0:
63:14:f2:89:e8:34:3d:16:3d:0d:6b:a7:8c:40:17:
25:80:3f:56:0a:02:17:f8:44:28:2b:01:6f:fd:40:
ae:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
146991
sbgp-ipAddrBlock: critical
IPv4:
103.172.141.0/24
IPv6:
2407:d4c0::/32
Signature Algorithm: sha256WithRSAEncryption
97:6a:3c:bb:a0:0a:b5:4d:eb:4e:7d:8e:ae:98:80:68:5c:97:
45:2a:1d:17:9c:cc:9c:ab:13:88:4c:7b:3b:09:e5:d5:a9:2e:
e3:35:3a:a2:15:ca:fc:0b:e5:e7:53:46:ac:85:06:e1:ba:35:
65:96:34:e4:c8:15:8b:b9:b2:d2:7d:9c:cf:a4:b5:71:30:43:
c8:f7:38:9c:63:e2:f8:cb:18:10:f7:c7:9c:b3:1f:b6:7b:bf:
e8:d5:06:d9:8b:7f:cc:14:24:17:46:12:e7:31:14:ea:1d:8f:
1c:d7:ae:de:ba:b6:a4:d8:47:f7:0a:ce:3b:0a:dd:1f:de:1d:
b6:7f:ab:23:3b:9f:cd:f2:bd:48:a1:5e:6d:05:2a:26:cf:78:
a2:99:f1:87:94:5d:7d:da:36:ed:37:13:07:3b:f1:eb:d4:5e:
f6:82:77:de:8a:1f:ef:1f:92:09:dc:3a:33:d1:79:1b:de:4f:
b4:d0:f6:72:7c:2a:e3:1e:b6:26:08:19:e5:a8:d7:5c:c0:ed:
7f:b5:99:90:46:5d:10:db:0b:f4:7d:a8:df:9b:28:3d:12:24:
21:e5:b0:c3:5e:0c:35:ca:ea:e7:06:8e:8a:f5:87:df:ad:de:
1b:0a:1c:d1:50:a5:80:25:32:6a:54:fd:7f:fb:19:71:0b:c8:
cb:6b:89:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:58:20 2026 by rpki-client