
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/flxEJXLUsPmrZIiClNR_qz972zQ.cer
File: flxEJXLUsPmrZIiClNR_qz972zQ.cer (raw, json)
Hash identifier: Ji+sa+LHgugc19FLTQd3s9avjfFVQ67WMNUg84KFUNU=
Subject key identifier: 7E:5C:44:25:72:D4:B0:F9:AB:64:88:82:94:D4:7F:AB:3F:7B:DB:34
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A7C5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916C243/6101B5E62CCD11F1863460AC92833773/flxEJXLUsPmrZIiClNR_qz972zQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916C243/6101B5E62CCD11F1863460AC92833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 31 Mar 2026 06:46:47 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 103.245.157.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174021 (0x2a7c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 31 06:46:47 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A916C243, serialNumber=7E5C442572D4B0F9AB64888294D47FAB3F7BDB34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:67:a3:fe:3b:65:6f:4a:2c:fa:ac:f4:8a:
57:e0:f8:9d:9e:52:fe:f0:95:7d:2e:e4:ce:16:cc:
36:64:63:ea:72:3b:8d:94:32:97:7b:e1:db:aa:9a:
b1:0c:39:c7:12:9a:15:51:ee:a2:f8:ba:aa:89:65:
51:54:82:db:08:54:34:f7:73:22:71:27:f1:e7:fe:
d4:22:37:6c:f4:92:40:c0:fd:68:64:df:fc:46:6a:
de:eb:c3:63:6e:79:65:38:ff:12:29:da:3d:fc:fe:
0a:6a:be:89:ae:5d:50:3c:6a:0e:2d:f2:10:0d:cc:
3f:e2:fc:b7:f4:34:f0:73:8e:84:01:65:a0:15:82:
37:14:a4:2d:a4:2a:f6:33:c1:e4:da:99:d9:49:46:
42:92:e7:50:91:7f:72:a4:7f:11:31:d3:1d:39:eb:
e4:6d:a7:e1:58:06:a2:09:cc:da:59:46:39:b2:21:
89:02:92:23:4e:a1:1e:b1:7e:10:e7:a3:68:03:e8:
c5:7c:cb:63:3e:e0:9f:81:34:8c:3c:62:ca:76:73:
ef:b2:53:45:49:81:66:94:76:f1:06:ad:79:70:69:
02:20:0c:c2:01:73:88:8d:09:96:b1:4f:2b:a3:1c:
76:0f:5d:50:92:0a:2b:43:16:89:09:e7:87:08:15:
ff:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5C:44:25:72:D4:B0:F9:AB:64:88:82:94:D4:7F:AB:3F:7B:DB:34
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916C243/6101B5E62CCD11F1863460AC92833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916C243/6101B5E62CCD11F1863460AC92833773/flxEJXLUsPmrZIiClNR_qz972zQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.245.157.0/24
Signature Algorithm: sha256WithRSAEncryption
72:b1:d6:24:3e:07:69:c0:4a:a6:83:3b:e8:b1:2b:67:2a:c8:
b1:b2:c8:f3:1e:9f:0f:7a:85:70:e9:48:33:a8:d5:9a:1f:c7:
fb:d4:6f:36:1b:3b:bc:fc:1a:fb:b0:1f:ea:33:a0:af:c0:44:
da:bd:71:b1:42:d4:aa:03:c2:a9:61:54:d8:3e:25:e4:a3:17:
6d:72:43:d8:ed:38:7c:ea:12:f7:df:24:6a:af:3e:b0:05:a7:
dd:e1:ef:c4:39:4a:5d:d3:9f:68:41:48:6d:d8:32:e1:45:b9:
dd:e8:3c:b2:a7:f4:34:b5:06:87:fa:86:6f:25:83:42:c9:ad:
05:c4:03:1a:49:d6:6e:be:38:4f:c4:67:46:e9:c5:f3:02:c0:
d4:20:0f:f2:43:bf:c0:da:c5:7e:63:1d:63:69:b7:51:ec:cf:
13:21:d3:5a:be:02:24:49:40:95:43:81:09:2e:03:f9:33:76:
44:70:43:42:28:91:ae:cf:1d:46:22:c9:2c:b1:91:02:55:b6:
3d:3f:7f:c0:55:86:a8:e9:85:0c:6c:bf:bf:2e:f9:0b:7b:ac:
90:51:eb:03:87:13:c6:49:e1:56:d5:f1:cf:e9:e3:26:dd:28:
25:9f:ae:93:92:a5:35:0e:a9:ad:5d:55:17:5e:ca:a1:e3:e9:
ab:d8:c1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 18:27:51 2026 by rpki-client