Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer
File: 6tNqfTCwZhVrgDAlqqpf-SetdcI.cer (raw, json)
Hash identifier: poRCuH1VDXhCTOVeCJe3SnDVGpXDTwpL8EbZvnQm4Bo=
Subject key identifier: EA:D3:6A:7D:30:B0:66:15:6B:80:30:25:AA:AA:5F:F9:27:AD:75:C2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D8E8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 28 Sep 2026 13:09:46 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 136757
IP: 103.89.38.0/23
IP: 103.239.106.0/23
IP: 202.155.184.0/23
IP: 203.31.66.0/24
IP: 203.34.61.0/24
IP: 203.55.144.0/24
IP: 2400:c040::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186600 (0x2d8e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 28 13:09:46 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91722C3, serialNumber=EAD36A7D30B066156B803025AAAA5FF927AD75C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7a:99:31:30:85:6b:9f:a3:85:9e:bd:ea:73:
95:70:05:47:25:58:26:6b:99:8d:91:6e:84:9e:69:
cf:74:a0:21:97:c1:71:4e:91:b5:b1:53:2d:46:24:
b7:37:b9:09:af:b0:ff:fd:d8:ae:2a:62:78:cc:90:
d5:51:19:e8:c5:c4:2e:e0:d5:90:7e:ac:c5:84:b4:
58:0d:72:57:71:86:72:11:a3:e4:20:8a:a9:ca:f2:
26:61:84:84:17:4a:81:a5:13:4a:9c:ed:cf:1d:14:
c6:d0:1c:2c:ed:fa:90:10:7b:a5:f3:be:fb:a7:14:
11:3f:b2:60:e1:af:5f:49:b9:26:5d:a4:20:21:d2:
4c:fb:73:3d:70:e6:a1:59:3f:93:95:6d:a3:d9:a3:
c6:c0:68:f1:b5:db:05:a8:67:a1:cf:89:37:cb:ca:
24:5d:b9:9d:69:0f:34:8a:19:f7:a4:65:74:7a:a2:
01:a8:2e:13:f3:e1:72:2b:ec:f1:65:6e:f3:9f:5e:
fc:5b:75:e2:d5:98:ce:56:d3:1e:e4:35:6d:56:9d:
a7:ad:78:f2:03:33:ba:28:16:17:8b:b0:a6:da:06:
5f:cd:f0:8c:6d:e9:8c:33:80:48:ab:a5:53:87:1c:
cc:cc:17:a3:b2:b3:dc:65:0d:b5:d4:20:3d:0f:b7:
48:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D3:6A:7D:30:B0:66:15:6B:80:30:25:AA:AA:5F:F9:27:AD:75:C2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136757
sbgp-ipAddrBlock: critical
IPv4:
103.89.38.0/23
103.239.106.0/23
202.155.184.0/23
203.31.66.0/24
203.34.61.0/24
203.55.144.0/24
IPv6:
2400:c040::/32
Signature Algorithm: sha256WithRSAEncryption
45:fb:4d:8d:5c:28:ef:ad:42:50:ea:e3:72:49:8b:18:b1:f4:
3b:87:df:f7:af:ed:40:a8:ad:d5:1f:63:81:3f:8e:5b:27:2c:
ad:57:a0:00:97:b6:a1:c2:e1:42:3a:21:17:5e:1b:17:7f:bc:
27:30:9e:32:20:64:12:41:e2:96:5c:a1:bf:63:fb:4d:63:5b:
2b:fe:3f:45:53:c9:9a:f5:0c:86:5e:7f:46:a6:f5:1d:b1:28:
ad:04:ff:0a:9d:47:f5:c2:ef:4d:20:d5:a5:85:f9:b9:10:fb:
a4:74:48:5c:ce:bb:0a:86:b5:fb:0d:18:d1:f9:fa:67:21:4f:
27:ee:da:e4:ee:ad:0a:04:4d:3f:50:27:ee:6c:9f:a9:cd:45:
1d:1e:5b:b1:1f:6b:cc:25:bb:85:fa:08:d3:b2:29:8f:81:93:
f6:55:00:78:15:2b:60:4d:c4:c0:f1:03:9d:0d:fe:7e:f3:24:
ba:9f:12:4a:13:72:46:41:5a:cf:8c:50:11:a2:fe:eb:28:bc:
02:e8:1c:d3:07:54:e7:44:e3:2b:f4:b9:57:be:b5:56:c5:94:
1c:9e:15:8c:e0:94:2e:0f:2f:dd:e0:3a:23:9f:4e:fa:59:a5:
03:16:cd:4c:1a:86:23:be:86:3f:d3:4f:6d:4c:d7:de:54:ea:
ab:55:70:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:47:58 2026 by rpki-client