Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/INe_EF7TPkSJu-KZzcG17n7vQpQ.cer
File: INe_EF7TPkSJu-KZzcG17n7vQpQ.cer (raw, json)
Hash identifier: L2vwA3ywRZs2/7FMcMvxTixZYRkASkCVQD3oRFaCXio=
Subject key identifier: 20:D7:BF:10:5E:D3:3E:44:89:BB:E2:99:CD:C1:B5:EE:7E:EF:42:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A940
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E6622/2E1AF8EE2E6D11F1880B3652A0833773/INe_EF7TPkSJu-KZzcG17n7vQpQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E6622/2E1AF8EE2E6D11F1880B3652A0833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Apr 2026 08:23:12 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 133139
IP: 43.251.44.0/22
IP: 103.252.132.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174400 (0x2a940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 2 08:23:12 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91E6622, serialNumber=20D7BF105ED33E4489BBE299CDC1B5EE7EEF4294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:fa:8b:fe:6a:96:0c:80:48:0e:ca:91:bd:
22:a5:d4:a6:fb:19:38:b2:67:c1:17:2c:8f:06:19:
11:ea:82:15:41:a7:f5:fe:83:85:96:b1:cc:48:f5:
fb:b6:15:1a:50:ff:8f:b2:4d:cd:89:9d:95:19:93:
78:97:df:db:ed:1c:e6:13:cd:05:65:3b:75:87:4b:
cf:34:76:f5:53:52:2c:f1:74:ec:49:d8:09:a1:43:
00:ad:1d:fa:97:32:c7:00:e4:6c:d3:3f:f1:fe:a7:
e7:fa:03:90:60:f4:36:46:a1:60:c4:c7:19:7c:3c:
e5:6d:f6:b7:07:e2:3d:55:4f:22:fa:99:56:ef:ca:
3a:45:63:9e:47:22:03:30:44:2a:fe:0f:65:da:ec:
41:8a:b6:12:da:c6:16:50:13:82:5f:f9:41:31:de:
95:f7:10:4a:c7:9a:34:dc:9a:ca:62:5c:09:dd:0c:
42:45:8c:1b:42:fb:4e:5e:09:92:cc:fb:98:95:ae:
f7:5c:df:4b:c6:02:1f:79:ee:39:c8:00:80:4c:84:
18:56:4e:fa:15:8a:84:d7:7d:3b:70:d2:1d:3a:d1:
ca:dd:4a:24:16:c1:1a:a6:94:a3:e7:ae:c2:7c:13:
07:cc:7e:58:5e:f4:5e:d6:44:4a:a7:1e:63:9e:67:
2f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D7:BF:10:5E:D3:3E:44:89:BB:E2:99:CD:C1:B5:EE:7E:EF:42:94
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E6622/2E1AF8EE2E6D11F1880B3652A0833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E6622/2E1AF8EE2E6D11F1880B3652A0833773/INe_EF7TPkSJu-KZzcG17n7vQpQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133139
sbgp-ipAddrBlock: critical
IPv4:
43.251.44.0/22
103.252.132.0/22
Signature Algorithm: sha256WithRSAEncryption
30:c6:75:78:ee:62:02:5e:f4:79:a1:ca:80:11:2b:a8:50:08:
e1:b1:e2:b4:05:25:91:1b:6b:03:56:fc:ef:b1:56:fd:5a:88:
ee:55:e1:3f:39:4a:2c:be:8f:e5:40:c1:c2:6f:b2:dc:b3:fb:
f8:f4:51:98:81:ee:f9:b4:f6:9e:e7:24:1d:7e:59:78:49:3f:
da:b1:c2:1c:39:3b:58:8b:33:36:15:17:2d:48:45:51:88:41:
0c:96:45:dc:e3:43:f9:33:85:56:23:56:0c:26:16:e2:a4:6c:
ee:1c:43:36:c5:0f:0f:65:e2:70:72:d7:1c:c6:1f:ec:ab:53:
cd:29:ec:dd:6e:b6:27:16:f3:67:b5:87:48:8b:16:ac:af:61:
48:47:ac:d9:af:d9:7d:cf:72:4c:d2:39:0e:cc:f6:d2:bc:80:
20:69:d7:de:99:0e:5a:0d:25:24:ad:6a:76:b3:fc:01:43:2b:
80:49:f3:eb:df:db:8d:e3:b5:f2:e2:a8:35:12:c2:8b:8f:8f:
6b:21:66:a1:89:ca:7e:e2:b6:7d:b0:b8:20:5f:ff:13:71:6a:
c4:38:ff:dc:42:8c:d0:4e:fb:34:6f:7e:66:14:cc:4a:33:6d:
b0:7c:10:89:0b:35:47:32:e8:18:31:f3:33:e8:db:31:43:00:
30:3e:ce:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 18:28:02 2026 by rpki-client