
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
File: x8kdlvp-jS2SIZUipkBEI3UR4FE.cer (raw, json)
Hash identifier: wIKvqTBq+HA4Iuxy3C3gIW7fraeab5tnMkOVC4tERLQ=
Subject key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A83E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 31 Mar 2026 15:06:11 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 149514
IP: 103.181.162.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174142 (0x2a83e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 31 15:06:11 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:f2:41:bd:a0:5e:26:92:f8:71:c4:46:fe:
97:70:c5:b4:82:28:fb:b9:bd:95:a3:56:10:c4:43:
f7:60:30:c8:25:87:a4:6f:e8:92:cc:03:da:b4:3f:
32:cc:bd:1a:22:e0:1b:d9:c1:42:b9:fb:50:c9:e6:
cb:60:72:a4:ea:e0:08:fa:c2:81:6e:6c:a2:90:87:
c3:f6:0c:4d:85:cd:d9:0a:cd:e8:c0:a3:e9:29:0d:
5d:ef:0d:6d:41:1b:5f:25:dc:ef:e8:da:37:4e:5a:
13:35:5f:9e:e9:bc:e2:54:cf:26:d7:21:3a:2e:02:
90:c6:25:9d:6b:bd:ef:e1:15:81:19:2a:be:10:a8:
13:21:b7:5b:d9:38:0b:a8:14:ff:f9:ce:92:ed:e0:
81:45:7f:43:38:cf:59:81:25:c4:b6:40:7b:18:5a:
d7:24:19:dd:1a:75:f6:5f:4a:a6:f6:ea:db:f4:a5:
41:f7:b4:94:91:91:d4:fb:39:0e:d9:76:a2:ea:a2:
e5:aa:23:bf:fe:af:19:1e:dc:0c:ee:e8:0a:1b:e5:
12:8d:38:10:ff:68:17:00:eb:f1:a9:8e:8d:37:1a:
d0:7a:b5:c0:a2:47:17:fa:6e:7e:16:30:76:4a:3f:
17:31:75:c4:6a:d9:17:05:4d:19:ff:51:52:30:a7:
59:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149514
sbgp-ipAddrBlock: critical
IPv4:
103.181.162.0/23
Signature Algorithm: sha256WithRSAEncryption
52:8b:26:f7:56:d4:fd:2b:6f:52:db:e2:95:5c:45:01:6b:d7:
ac:3a:5c:08:5b:0a:8d:bf:df:83:7a:6f:e2:30:79:88:ea:8e:
8a:9b:d4:c5:5a:45:c1:b0:a0:dd:e2:dd:93:f3:b0:b9:92:f8:
be:4b:b2:b0:c8:b3:1f:9f:61:2f:7a:75:f4:44:ee:9b:b8:74:
dc:7c:71:f6:c0:39:4f:8b:7f:3b:d9:e2:55:f3:e9:dd:33:aa:
3d:73:b2:cf:d7:b7:44:91:c9:6a:a9:0d:0d:41:1f:05:d2:e2:
5f:65:07:66:1b:7b:1f:fd:2d:48:d1:87:f3:64:03:c6:91:8e:
c3:3f:23:ff:37:88:57:87:aa:32:25:df:de:e7:49:ae:e3:c8:
f6:39:56:fe:83:d6:59:09:e1:75:19:44:23:6e:69:e7:2d:f5:
d1:7c:6a:28:ea:fc:c4:b7:01:14:9c:a7:ed:ac:cc:6f:e3:36:
d0:f0:7b:b9:de:17:c3:bb:79:52:8c:32:3b:85:7a:55:10:1e:
ba:9e:85:5f:dc:bf:b6:71:db:4c:29:d9:27:47:e5:94:28:f9:
80:42:c7:e7:53:83:5c:1f:a5:80:ab:25:84:e4:4a:56:96:8b:
ce:79:48:30:8d:b5:f8:7a:cf:5d:f5:f3:06:93:73:f3:13:62:
be:37:ab:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:09 2026 by rpki-client