Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mAalrTnqFTJ8SflGdb-adTWa2Q.cer
File: -mAalrTnqFTJ8SflGdb-adTWa2Q.cer (raw, json)
Hash identifier: jqskyBRbIhVjjWWb6rZ6WNnswXx2vG029lodqrYcfoI=
Subject key identifier: FA:60:1A:96:B4:E7:A8:54:C9:F1:27:E5:19:D6:FE:69:D4:D6:6B:64
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AEAA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 24 Apr 2026 02:08:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 132330
IP: 103.12.165.0/24
IP: 2001:df7:d400::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175786 (0x2aeaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 24 02:08:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A919CD86, serialNumber=FA601A96B4E7A854C9F127E519D6FE69D4D66B64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:cd:54:e9:68:09:df:12:4c:2e:a5:2a:0f:
6d:bd:94:05:40:f4:49:80:de:3f:55:ed:ba:e4:de:
b7:22:59:a6:07:13:d1:d6:30:fd:d0:26:a4:47:6d:
fb:fb:2b:e9:14:a0:08:05:c8:64:9f:5c:9c:77:32:
8c:3e:64:57:9c:f3:7f:34:a5:b0:7f:9b:5a:b9:f4:
5f:23:8b:ea:d3:d8:a4:b0:da:8b:7e:32:5b:d1:9e:
e3:bb:78:5e:0e:04:b8:b8:db:9f:d0:7d:36:80:79:
2a:17:e3:71:57:9b:dc:f8:3b:fe:65:b9:28:7b:56:
72:5b:09:55:74:0d:93:ed:0c:bb:d7:b2:4f:8f:96:
4f:29:d8:fc:48:0a:e2:e7:85:bb:c2:6f:56:a5:bb:
e9:fb:22:6d:c6:38:f8:a8:70:c9:04:96:84:ff:45:
ee:b1:cc:34:c1:a7:8a:d8:5f:08:fd:8a:8d:c2:b0:
72:c8:46:0c:e9:fd:a4:88:12:b1:63:b3:3b:24:23:
3a:d0:21:8b:dc:3f:10:0d:3a:94:8b:98:cd:83:81:
6f:9f:b4:b1:5b:26:99:ae:48:01:d3:07:7d:e6:0b:
24:1d:f7:9d:3b:56:2a:23:d3:2e:ff:90:de:39:c3:
24:1a:5c:50:5c:e0:63:60:6f:72:3e:9f:58:0c:bd:
19:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:60:1A:96:B4:E7:A8:54:C9:F1:27:E5:19:D6:FE:69:D4:D6:6B:64
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132330
sbgp-ipAddrBlock: critical
IPv4:
103.12.165.0/24
IPv6:
2001:df7:d400::/48
Signature Algorithm: sha256WithRSAEncryption
ba:ba:a8:eb:91:75:1a:f9:b6:81:c4:cf:e7:49:20:db:7e:b2:
13:94:d4:9a:9a:ee:3e:87:03:ba:52:ed:77:56:9a:af:bf:7f:
f8:af:59:9a:da:d7:05:4f:d9:eb:a5:a3:7c:9e:70:d6:02:5c:
8e:53:14:88:76:12:7b:04:13:6c:0f:21:76:4f:3e:73:5b:98:
82:15:37:7a:62:ad:92:6d:55:8d:d0:09:4a:fb:ba:dd:7e:23:
60:21:6d:c3:b6:93:62:ce:80:ff:8a:55:69:90:ef:29:60:30:
5d:c3:e4:bb:b9:db:10:4d:2a:a3:b8:c0:78:97:34:ad:22:b0:
2d:db:dd:8a:4b:f0:b5:74:15:fd:18:b2:e3:05:7e:5e:62:f4:
ed:bd:d4:df:dc:94:fe:e2:7e:b8:91:a2:5a:72:7c:65:e9:a8:
5f:96:68:20:1f:79:73:21:45:96:f6:aa:5f:66:93:57:e7:0b:
d8:e5:e5:80:1d:93:a4:78:35:b5:33:2f:6a:08:d7:a6:7c:07:
c7:e1:77:ee:92:b9:a9:18:11:8e:c7:81:c4:14:f1:3f:b3:76:
65:6a:ed:28:97:06:c9:80:58:33:cf:b6:5c:4c:cf:df:c9:60:
56:49:d3:a5:1e:66:b3:48:2f:a0:d2:53:20:d9:35:9c:19:95:
0c:b4:2b:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 21 08:40:44 2026 by rpki-client