Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63FQpM6SL6wpsyjukMw8MGZdHAE.cer
File: 63FQpM6SL6wpsyjukMw8MGZdHAE.cer (raw, json)
Hash identifier: rCDLXQ/aUA7wTnUnQbvY8KhIRsTGSI7J00uLWH6bOpc=
Subject key identifier: EB:71:50:A4:CE:92:2F:AC:29:B3:28:EE:90:CC:3C:30:66:5D:1C:01
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DF2F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/63FQpM6SL6wpsyjukMw8MGZdHAE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 19 Oct 2026 22:49:52 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 55359
AS: 58940
AS: 63934
AS: 133100
AS: 133215
IP: 43.242.40.0/22
IP: 43.245.164.0/22
IP: 103.4.16.0/22
IP: 103.18.40.0/22
IP: 103.25.160.0/22
IP: 103.225.164.0/22
IP: 103.242.248.0/22
IP: 113.52.144.0/22
IP: 115.178.16.0/21
IP: 118.88.24.0/21
IP: 163.47.124.0/22
IP: 2402:fa00::/32
IP: 2407:500::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Nov 2026 02:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188207 (0x2df2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 19 22:49:52 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A912D0F9, serialNumber=EB7150A4CE922FAC29B328EE90CC3C30665D1C01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:fb:25:76:bf:c4:5e:b5:b2:04:0c:94:9f:
c0:c9:be:e4:9c:09:e2:24:54:2c:4f:3d:08:d9:13:
cc:d2:ae:5b:58:21:0a:cc:cd:8f:b0:2e:c1:d2:72:
f5:89:ee:e7:f3:f8:47:6d:d6:df:7b:a5:ef:f1:9e:
61:1e:0f:37:b4:5e:12:b3:7e:f2:04:04:ff:42:f5:
4f:51:69:01:08:93:02:2d:27:6f:79:27:c8:a1:b6:
3a:46:61:db:55:f7:68:70:d5:3a:e0:64:03:45:73:
db:71:80:ab:2f:8a:e2:04:46:a8:ca:e1:72:37:f5:
53:f6:e9:76:55:cf:1d:8f:8d:c4:c1:d1:69:a9:e2:
2c:43:f3:14:88:5c:73:81:ac:e7:68:c9:19:3c:a4:
60:89:82:28:10:e8:17:6e:76:f9:53:97:0c:33:43:
f8:9f:3e:2f:64:3b:bd:4a:12:e2:34:d5:f7:ca:ae:
e1:4f:46:ab:49:65:9a:a3:ee:7c:29:5a:e9:8f:28:
f5:88:16:4d:7e:cd:74:e1:6b:6e:fe:76:b4:b8:09:
f3:3c:e5:72:f5:8e:ca:78:5b:e9:37:3f:52:bb:a4:
7c:b0:23:46:a6:a1:55:06:1a:84:d6:b6:d0:fa:fd:
ff:92:e8:3b:9e:d4:93:23:57:d9:45:2b:7f:e1:5c:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:71:50:A4:CE:92:2F:AC:29:B3:28:EE:90:CC:3C:30:66:5D:1C:01
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/63FQpM6SL6wpsyjukMw8MGZdHAE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55359
58940
63934
133100
133215
sbgp-ipAddrBlock: critical
IPv4:
43.242.40.0/22
43.245.164.0/22
103.4.16.0/22
103.18.40.0/22
103.25.160.0/22
103.225.164.0/22
103.242.248.0/22
113.52.144.0/22
115.178.16.0/21
118.88.24.0/21
163.47.124.0/22
IPv6:
2402:fa00::/32
2407:500::/32
Signature Algorithm: sha256WithRSAEncryption
36:3d:a6:2b:cb:61:26:2e:b2:c0:09:c6:23:a9:a0:7e:4a:e5:
f9:10:56:4a:7f:7e:c5:ea:86:da:70:89:d4:cf:8a:ea:66:ea:
a7:d2:8a:8f:17:e1:d2:e6:15:99:61:2e:1f:fe:b3:42:65:a9:
ce:04:de:e8:92:27:33:fa:b3:f3:ed:da:c1:61:d1:c6:5e:b7:
65:04:e5:3f:83:31:af:e5:f0:a4:56:81:1e:35:9a:e6:75:aa:
52:a9:3c:4a:52:2d:dc:08:30:46:02:ab:4e:ee:14:f9:fa:ee:
29:ae:a6:a9:af:cd:2a:b9:96:ab:58:c5:6a:94:01:e6:0f:bc:
c2:cb:7e:5d:a2:cb:8b:67:9d:74:96:bd:cb:10:cd:67:25:69:
fb:35:78:8f:ea:63:5e:55:fb:9c:43:b1:a2:ea:3d:c6:47:0c:
ab:c9:0a:44:f4:1e:04:63:f4:6f:05:82:cf:d5:56:bf:cb:bb:
96:df:b3:31:06:df:92:b9:39:66:a0:f4:c9:80:67:32:15:b9:
ab:4c:3b:12:25:99:3f:1a:d1:32:0f:ca:ef:76:af:2c:15:a6:
9b:b8:13:68:87:d9:35:c6:c1:87:da:17:ec:72:bb:0d:d6:0a:
23:55:bb:30:4d:c9:87:42:b0:5e:85:31:2c:94:aa:44:ee:36:
92:f3:6d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:23:10 2026 by rpki-client