Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer
File: x8MjS9JtrWKeLX70REhP5UHYFI4.cer (raw, json)
Hash identifier: C8PBKFBh8GIZw/zyarmGybuQdWdh6rsTWBdiSjel/rg=
Subject key identifier: C7:C3:23:4B:D2:6D:AD:62:9E:2D:7E:F4:44:48:4F:E5:41:D8:14:8E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B72F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 26 May 2026 14:38:59 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 136050
IP: 103.167.64.0/23
IP: 2001:df6:a980::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 16:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177967 (0x2b72f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 26 14:38:59 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91E36C4, serialNumber=C7C3234BD26DAD629E2D7EF444484FE541D8148E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f9:1c:ef:4d:16:e8:5b:b6:59:6d:fc:ed:cd:
2f:f0:41:96:1e:98:1b:fa:f3:86:48:df:e1:49:72:
e1:d6:74:2a:fc:38:44:7a:17:1d:b2:91:47:64:57:
ed:fa:ce:a9:3e:c5:05:e2:fe:db:e7:b1:37:5f:e1:
ce:79:2c:e0:ab:05:46:6d:99:ac:e6:a9:e3:c9:a4:
be:c3:25:c5:83:d8:87:95:d2:a6:14:c5:dd:32:05:
c5:ba:03:00:78:1c:9e:04:e5:a5:78:cf:de:2d:2c:
75:e3:93:90:bf:16:07:e6:47:00:61:5e:6d:a8:76:
0c:3d:64:07:66:93:1a:10:af:a3:a6:68:35:10:bc:
46:ff:23:54:53:1e:fd:19:a8:4c:d5:52:e7:f6:84:
ce:ba:d5:68:1b:07:30:fe:0f:fb:00:8d:0d:40:03:
11:f6:40:18:21:51:d2:22:6b:93:f9:d3:f1:ca:a3:
ef:50:f6:a4:2e:00:56:45:06:12:1f:cf:80:66:5f:
1c:4b:81:de:c8:83:f5:34:a3:19:d8:7d:24:a0:09:
c2:07:52:e0:64:3a:74:e7:eb:b9:30:30:86:1b:4b:
2e:16:58:9c:5c:08:72:28:ce:82:97:08:c5:b6:53:
a4:8f:4c:0c:34:90:03:5c:4b:0b:fb:94:ba:2a:35:
d0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C3:23:4B:D2:6D:AD:62:9E:2D:7E:F4:44:48:4F:E5:41:D8:14:8E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136050
sbgp-ipAddrBlock: critical
IPv4:
103.167.64.0/23
IPv6:
2001:df6:a980::/48
Signature Algorithm: sha256WithRSAEncryption
8a:50:d5:d4:5c:d9:93:6e:d8:93:f4:6d:64:1a:5c:22:7c:d2:
76:dd:c5:af:96:be:3a:57:cb:b7:f3:b8:e3:22:36:d0:f6:4f:
b3:06:b3:5e:73:ac:7a:ec:67:51:39:a9:a7:8a:80:00:c6:b6:
34:41:0e:9c:d8:1a:b7:f2:44:86:9e:04:b9:f3:06:6f:aa:ef:
10:d6:e1:3b:89:d2:9e:a2:db:c3:18:45:e8:4d:c3:51:00:e7:
e6:1f:35:69:41:db:69:6a:8e:ee:b7:53:d3:f7:d8:81:d2:61:
27:38:ed:ca:c2:67:75:2b:42:c5:24:35:d3:c5:89:7a:a4:31:
36:4f:a5:28:c9:e1:2b:9f:11:86:4d:64:2b:85:d5:08:01:d7:
60:0f:62:6c:b8:f5:a6:39:ce:7d:ea:40:c8:8e:e1:82:fd:ae:
26:ae:61:13:c4:2f:09:29:f8:18:c8:17:27:cd:0f:d1:82:6b:
2e:12:67:c5:a4:3c:b5:b2:4b:72:47:87:07:a7:97:41:1f:f6:
42:e8:0d:ec:15:eb:de:e5:a3:6f:27:b9:94:63:31:37:dc:a2:
fe:ab:19:24:6b:8e:44:6a:3e:e8:4f:be:15:68:7a:48:2f:d9:
06:fd:5c:9a:54:5c:64:20:ab:98:d9:da:8d:4e:f6:e8:cb:f2:
18:ec:9b:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:27:03 2026 by rpki-client