Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer
File: xh7aKdRphAjI5WdDhpTVNnJaEn0.cer (raw, json)
Hash identifier: rJXw1RrKuLTFAXqKAmNYKLtCvJzIruNK6f3/2HdGZ+M=
Subject key identifier: C6:1E:DA:29:D4:69:84:08:C8:E5:67:43:86:94:D5:36:72:5A:12:7D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C904
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 31 Jul 2026 09:44:43 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 136777
IP: 103.95.232.0/23
IP: 203.26.204.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182532 (0x2c904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 31 09:44:43 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A918966F, serialNumber=C61EDA29D4698408C8E567438694D536725A127D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:0c:a0:0a:a8:1c:81:85:7f:f3:39:7f:33:
f4:aa:3a:e0:ce:d0:6b:d5:3a:23:57:12:bf:d9:69:
73:1a:6d:5e:ba:2a:08:90:03:05:c2:a2:7d:a7:8b:
99:03:00:0a:1e:c8:63:b6:aa:d5:ed:9b:8f:1a:70:
29:04:eb:84:5a:aa:ec:4d:7d:31:29:8c:8a:79:4d:
c1:ad:59:93:b0:37:11:37:37:01:9e:dd:7e:80:79:
37:57:b5:45:a4:86:77:d2:ca:8d:d7:77:f2:8f:f0:
11:f7:95:be:55:4b:e1:f6:0c:fc:dc:2d:09:24:ce:
06:d2:20:b6:15:12:b4:2f:d7:9b:36:46:6c:d3:6c:
0a:6f:73:34:23:45:5b:93:39:04:d3:21:49:69:5b:
8f:25:a7:6b:08:c1:ec:4d:1c:b2:ed:ec:e9:6d:56:
53:23:84:ed:c7:13:96:d2:56:bd:5b:e4:9f:4f:57:
23:89:64:ef:5a:2f:1e:a4:06:03:6c:ce:63:f6:5b:
38:e3:77:96:54:93:cb:4a:41:7f:47:f8:9d:69:a0:
f9:b9:77:42:1d:0c:0b:c4:48:49:f7:7d:c1:d1:5c:
e7:e3:a4:30:30:ae:94:c5:b8:3c:d7:34:1e:b8:59:
38:70:c8:c7:80:4b:fc:a4:03:75:c7:3c:09:cb:aa:
b0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1E:DA:29:D4:69:84:08:C8:E5:67:43:86:94:D5:36:72:5A:12:7D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136777
sbgp-ipAddrBlock: critical
IPv4:
103.95.232.0/23
203.26.204.0/24
Signature Algorithm: sha256WithRSAEncryption
51:42:56:bd:62:8e:cf:c0:da:8f:46:df:25:02:1b:ba:fb:6e:
ed:f2:92:e8:c0:6a:17:90:17:76:1c:56:71:58:b0:e9:9f:a3:
2d:63:9f:d0:10:b8:b5:d0:d9:3c:7f:52:64:2e:a7:66:90:f5:
db:18:4f:c2:0f:ab:45:4f:f0:69:37:4b:86:25:9c:76:42:b2:
f3:a9:f7:49:20:57:c6:07:15:5e:b6:5d:e2:c7:79:8f:ea:e6:
e8:57:84:89:77:72:48:af:af:30:62:76:f8:57:0a:c5:86:75:
3d:e6:fb:57:7f:fe:08:d2:40:c6:2f:a3:a5:d4:ee:89:d6:35:
78:9d:67:d3:54:9b:81:65:78:7b:77:d3:1f:d2:72:1d:3d:7c:
6d:d8:3e:cf:17:5e:4e:07:4c:10:00:9e:d9:1e:91:84:b5:a9:
83:05:3a:d5:b8:c3:d1:5d:9b:30:f2:89:63:5c:8a:77:0a:d8:
09:54:ca:ff:c7:38:9d:e7:ea:61:16:6e:13:8d:a8:86:aa:14:
ce:27:f6:e4:3b:f6:09:e4:7b:40:7b:99:88:c6:3f:2c:9a:7b:
89:2c:e7:49:69:d8:d9:59:2e:30:44:16:48:2c:41:66:e4:92:
f2:16:61:29:5d:7c:88:e4:15:09:78:a1:fb:6f:76:9e:dc:ce:
d6:6f:3d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:35:00 2026 by rpki-client