Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
File: 3dU_UiXtL42o0J56rZgsgLbOrag.cer (raw, json)
Hash identifier: 0DqJMu9S2z73TczUlWydEWpyyfMiZM9P9kQElZPbt84=
Subject key identifier: DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A99A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Apr 2026 13:43:57 +0000
Certificate not after: Sat 01 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 136215
IP: 103.83.232.0/22
IP: 203.89.124.0/22
IP: 2400:9740::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174490 (0x2a99a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 2 13:43:57 2026 GMT
Not After : Aug 1 00:00:00 2026 GMT
Subject: CN=A91658EF, serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:ca:f3:25:96:86:e8:01:d1:bc:39:86:d7:
a2:e4:3b:40:80:da:a9:de:f0:4e:0b:bb:a3:14:99:
c4:e1:33:5b:94:a2:03:3d:94:c9:39:e0:b4:9e:a0:
80:36:d5:2d:28:c7:f8:3e:52:c0:75:7d:df:ee:41:
86:1f:98:1d:6f:c7:e3:a4:fb:9c:45:ad:84:1e:19:
ca:d4:2f:78:c5:fe:39:63:88:4f:fb:2b:69:d2:22:
2b:fd:50:77:dc:56:29:e0:2f:36:10:35:6e:eb:74:
61:b5:e7:cc:10:a7:f2:58:6f:46:e1:50:3d:1c:66:
03:b7:9a:fa:be:f3:1f:e6:9a:f2:0c:3d:7d:68:c5:
84:1e:26:a0:4a:c8:f0:dd:b3:af:dd:32:51:da:f9:
ce:a1:8a:30:de:58:97:5f:55:0e:63:f0:09:59:3b:
ac:a8:72:2a:9a:e8:27:d4:f9:90:48:70:a4:45:78:
7e:73:f4:12:35:64:0b:1d:bd:9f:3e:a0:b1:e4:48:
dd:39:5b:82:74:76:6e:f5:16:2b:f1:3b:49:ba:09:
32:81:6c:51:49:a3:8f:c7:28:e0:49:6e:bb:61:28:
e1:c8:87:e1:0d:05:28:03:98:40:88:6d:15:b9:4f:
fd:a8:e7:76:32:1b:d2:4a:8e:ef:d0:35:e6:d7:a0:
f9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136215
sbgp-ipAddrBlock: critical
IPv4:
103.83.232.0/22
203.89.124.0/22
IPv6:
2400:9740::/32
Signature Algorithm: sha256WithRSAEncryption
99:05:c3:05:b5:f5:23:48:ed:23:ee:09:ed:60:8c:7a:f6:55:
2d:e0:a8:bf:d7:59:fe:2a:59:f8:93:f8:52:c8:6e:3d:df:44:
87:e3:89:46:69:d0:ac:19:b6:cf:cf:9d:dd:c6:ed:fb:1d:c2:
3c:1b:9c:57:6c:34:da:6e:82:32:c1:7a:91:db:8c:15:65:a1:
cd:c2:9e:9e:5a:d3:5c:e9:85:69:1d:bb:2d:70:9f:57:6c:83:
5e:cd:3f:02:55:53:f3:53:50:69:69:20:9c:56:ed:ec:97:aa:
2f:e4:e8:0b:3b:bf:21:47:99:cc:92:be:3b:9f:4b:f2:54:f1:
cc:8d:2c:29:36:43:6e:2b:ea:1a:ec:53:09:3d:3b:37:32:0c:
d9:a0:e0:30:60:10:29:d6:ff:8a:b9:8b:3c:34:8d:e4:f3:b1:
16:6a:32:05:0d:68:5a:e8:17:cd:1c:18:26:94:fd:c2:e8:5c:
15:38:90:cf:10:e6:20:99:fc:4d:3b:51:d9:fe:9a:bc:0c:c6:
63:ed:ca:dd:ee:21:c8:c6:58:a3:1a:4f:c7:18:bf:f5:0f:eb:
a4:51:1b:0d:41:84:b2:3a:dd:c6:e3:17:36:04:d0:80:c7:1d:
16:95:cd:4b:8f:e4:1f:2a:4c:66:8e:67:75:60:5d:79:54:13:
4d:27:a5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 18:34:59 2026 by rpki-client