Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer
File: 2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer (raw, json)
Hash identifier: UQYsONdeBdskbhjs0FRWJOr2PsasuyG2NYaWu5/nXik=
Subject key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C64D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 21 Jul 2026 13:21:30 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 7721
AS: 132479
AS: 132623
AS: 133555
AS: 134413
AS: 134477
AS: 134488
AS: 136535
AS: 136725
AS: 137264
AS: 137436
AS: 137835
AS: 137906
AS: 137908
AS: 138211
AS: 138401
AS: 138535
AS: 139231
AS: 139317
AS: 139791
AS: 140682
AS: 140731
AS: 140961
AS: 141429
AS: 141445
AS: 141776
AS: 142164
AS: 142433
AS: 142438
AS: 142553
AS: 142586
AS: 142642
AS: 149510
AS: 150141
AS: 150173
AS: 150184
AS: 150373
AS: 151187
AS: 151194
AS: 151202
AS: 151331
AS: 151418
AS: 151490
AS: 151673 -- 151674
AS: 151785
AS: 151814
AS: 152118
AS: 152134
AS: 152186
AS: 152598
AS: 152631
AS: 152697
AS: 152892
AS: 152911
AS: 152920 -- 152922
AS: 152930
AS: 153033 -- 153034
AS: 153057
AS: 153168
AS: 153170 -- 153172
AS: 153185 -- 153187
AS: 153189 -- 153190
AS: 153330 -- 153333
AS: 153376
AS: 153458
IP: 103.150.214.0/23
IP: 2406:840::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 19:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181837 (0x2c64d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 21 13:21:30 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f3:86:97:d7:15:ea:cd:9a:b0:3a:84:ba:ad:
97:50:60:31:1f:67:42:c7:a0:40:89:39:da:c6:1a:
a2:76:14:a9:69:f9:33:2f:1b:dd:53:7d:4c:da:77:
0c:46:d3:19:e4:4d:2c:f0:c5:55:11:49:86:c8:29:
b6:6e:27:70:7f:a9:7e:83:d8:76:a9:8a:d5:84:8b:
3c:b9:4a:1f:f9:03:59:d6:fb:c6:0b:a1:94:ef:41:
89:e8:92:e3:a8:4a:2e:3c:05:97:e1:99:5b:9a:e8:
c4:d5:fc:c8:ff:d0:d4:62:68:10:a3:af:38:9c:de:
53:6c:8b:6b:13:55:b0:b9:a6:c3:23:eb:24:d3:fd:
5e:2f:77:cd:28:a8:ac:cc:79:70:14:47:cf:9e:62:
24:53:b0:30:1d:82:6d:4d:42:1f:ef:8a:f8:80:4d:
e4:8b:7b:d5:5d:73:0d:ee:2b:8d:ee:9b:9e:c7:16:
64:43:9d:98:81:d7:c0:02:58:3d:c6:8c:d2:9c:75:
59:df:49:a7:70:4c:75:f4:a4:33:61:a4:16:85:2f:
1a:7e:e9:ae:a8:db:0c:f9:2d:3b:35:cc:3b:32:22:
84:ad:a7:63:23:8b:39:d1:70:43:66:15:2d:56:4a:
89:8d:f7:60:48:83:da:e7:6d:9a:01:a8:41:39:72:
c7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7721
132479
132623
133555
134413
134477
134488
136535
136725
137264
137436
137835
137906
137908
138211
138401
138535
139231
139317
139791
140682
140731
140961
141429
141445
141776
142164
142433
142438
142553
142586
142642
149510
150141
150173
150184
150373
151187
151194
151202
151331
151418
151490
151673-151674
151785
151814
152118
152134
152186
152598
152631
152697
152892
152911
152920-152922
152930
153033-153034
153057
153168
153170-153172
153185-153187
153189-153190
153330-153333
153376
153458
sbgp-ipAddrBlock: critical
IPv4:
103.150.214.0/23
IPv6:
2406:840::/32
Signature Algorithm: sha256WithRSAEncryption
5b:73:a5:ba:b9:9b:de:60:7a:ff:f9:a0:6f:f0:41:ca:72:a0:
6c:53:fc:99:0d:e0:4e:7b:5b:91:9d:4b:4e:75:5f:41:0a:c0:
10:02:fc:f7:50:bb:d7:20:c6:bb:a0:dc:4d:52:43:94:fd:a9:
24:5b:fa:6a:e6:f0:79:59:09:cc:6f:aa:52:3a:b2:7b:5d:83:
b9:8a:3b:de:1f:1c:2e:8c:85:d4:1c:80:3d:32:41:6a:7d:01:
0e:b9:11:23:f8:0a:0e:00:7f:e6:21:33:7b:f9:27:6d:13:a3:
28:89:88:9d:f5:fd:da:d1:66:c4:89:0c:a3:fb:ae:ee:0f:ec:
48:de:50:06:14:74:56:e1:06:a2:db:08:e3:40:26:2e:7b:ca:
06:45:9c:c8:8b:0d:73:9f:74:ad:b5:20:80:a4:b7:01:7a:31:
3e:90:e8:07:3d:71:4b:1d:99:75:4c:c7:42:64:b9:65:a1:ca:
09:90:de:4b:d3:b8:e6:65:95:a9:f8:72:c6:a9:df:fe:9d:38:
f0:73:df:fe:1f:0a:a6:78:e3:43:b3:83:b2:65:f7:b4:0b:db:
a1:72:5e:d5:29:59:ed:e6:43:a5:5d:a9:16:ac:ea:a5:2e:6e:
7c:43:f7:9b:a7:cc:69:d9:71:b3:3a:81:d2:97:f9:fa:39:f1:
f0:94:e5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:43 2026 by rpki-client