Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer
File: gqPk4CGF_7caxsaYwGdUjZzBhxA.cer (raw, json)
Hash identifier: a4geeQ66O47qDLWxTPxQXQCgMlsz6HZqfBwMNISsufU=
Subject key identifier: 82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A83C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 31 Mar 2026 15:04:24 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 137224
IP: 103.164.48.0/23
IP: 2001:df6:3c80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174140 (0x2a83c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 31 15:04:24 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91F33D6, serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:70:71:ca:cf:19:38:7a:25:6c:0f:d4:2b:ba:
ae:37:9e:0b:a7:a7:f5:72:8a:75:32:a8:68:36:ca:
0a:00:32:f6:65:f3:38:8f:30:9d:c1:1a:d8:0e:f4:
7e:bd:db:d4:1f:2b:16:7f:17:51:4a:f7:1e:3d:ad:
e2:dc:f4:3a:4c:9b:ca:46:42:ea:09:df:0b:64:82:
cf:9b:d0:a6:d0:37:b7:97:53:63:4f:8a:ec:f7:8f:
fb:47:04:d8:cd:d3:2d:0a:2f:40:2a:7a:1c:4c:05:
e7:89:50:0d:8e:e8:80:03:3b:ec:4e:e3:79:3d:ff:
6a:1f:c0:65:78:ed:67:32:04:17:25:75:59:a7:ed:
01:ab:0e:8e:7f:d1:c3:cb:69:52:5b:18:63:43:87:
41:bd:e3:76:ed:b2:cc:2c:ad:ef:22:88:1e:8c:dc:
3b:f0:29:7c:d1:08:e0:cb:9b:93:f5:2f:90:cd:b2:
9c:b1:85:ad:d0:cf:5b:f2:f6:32:9e:8f:01:f2:ef:
8b:b3:a5:73:31:9f:d5:71:1d:f6:2f:ba:4e:ce:a7:
10:38:16:b4:65:66:b7:df:ff:9f:3d:c6:17:7f:6d:
d5:ca:f4:e8:7d:f2:e6:fc:2e:50:4f:7b:65:3e:08:
4a:a4:b9:1f:45:b7:ed:88:45:54:d9:ad:b5:ec:1d:
cb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137224
sbgp-ipAddrBlock: critical
IPv4:
103.164.48.0/23
IPv6:
2001:df6:3c80::/48
Signature Algorithm: sha256WithRSAEncryption
8e:62:f3:68:c8:d3:1b:85:b9:ea:c7:a4:10:d3:23:2b:f9:20:
43:e9:9f:fa:b7:d7:2c:d2:62:3b:fe:6e:d5:73:89:2c:4a:85:
73:5f:31:05:6b:29:bc:4d:e8:7c:bd:e9:c2:13:c3:d7:7b:49:
4d:4c:72:91:56:32:b7:da:cc:91:4a:7b:3a:60:13:97:69:ca:
79:3a:c5:33:28:63:80:b6:16:48:b1:51:7d:88:90:15:c8:c3:
3b:10:18:4c:07:04:51:9d:86:6d:d0:83:93:e8:d1:04:c0:81:
3a:52:cd:78:7d:96:df:47:cc:c3:8e:f5:ba:18:05:b7:95:6f:
d8:0a:5c:4f:7a:13:24:d1:1c:55:52:34:54:6b:e0:67:a1:9b:
ba:6a:28:cc:5f:38:15:57:97:0c:84:ed:1b:11:14:a6:35:2d:
2d:b8:15:fc:57:ea:21:76:55:95:7a:05:64:c1:39:06:8d:05:
c8:0f:a7:2f:5d:66:0e:41:78:42:9f:65:25:b7:4c:4e:6e:29:
56:b0:c7:17:80:7c:9f:6a:f6:38:71:88:46:26:f9:61:de:71:
25:37:0d:38:1e:de:a6:79:b2:a1:2d:2c:f9:55:c4:f9:84:03:
8d:17:d2:20:1a:d8:b1:da:15:fe:79:22:84:1d:4a:1b:05:10:
c2:1e:9f:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 5 18:32:58 2026 by rpki-client