Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer
File: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer (raw, json)
Hash identifier: zaOKVTd8VkyRpyknM9Inc7iYSHaIpTHxDBFB1hERWzQ=
Subject key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D990
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 30 Sep 2026 12:57:56 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 136526
IP: 103.91.217.0/24
IP: 103.99.208.0 -- 103.99.210.255
IP: 2404:3e40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186768 (0x2d990)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 30 12:57:56 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:07:2e:e0:54:95:04:6d:3f:89:6b:17:c1:
f6:30:73:ae:f2:c9:38:e2:41:3f:67:e4:ba:b6:07:
9e:44:f3:1e:03:bf:b2:4f:ae:3f:77:a0:a4:5a:40:
be:df:15:4a:9b:34:ae:9f:23:9f:1b:d1:9e:8a:c3:
f9:bc:85:a3:56:73:2e:de:7f:cb:cb:ed:d1:43:14:
79:72:3b:10:d7:5e:38:3b:b2:ee:5d:71:09:f6:c0:
c1:5f:86:bc:47:83:84:2b:5e:a7:78:68:72:10:49:
4f:e5:ea:38:36:b2:91:a6:e3:be:2c:fb:bb:4f:92:
73:63:ff:4a:09:45:41:a1:eb:e5:1e:ae:0a:00:fd:
a2:96:95:da:0a:ac:1a:8a:bd:75:66:92:63:17:bc:
e1:c4:36:0c:0c:9a:ad:97:a1:2e:fc:e8:89:2b:e9:
85:ec:c4:91:b5:74:51:4b:b5:8a:e9:df:0c:a4:6b:
8f:c5:34:f2:36:38:12:a2:94:c1:1e:89:41:de:62:
23:6c:32:17:ed:ef:2c:bf:7f:b1:e6:93:4e:4d:b5:
ce:0f:68:49:a4:0c:7e:34:53:ef:21:1c:ec:15:95:
fe:5a:4d:e5:86:20:6f:c9:53:e2:49:f0:b5:11:16:
09:a3:06:7f:22:96:a7:5b:62:e7:84:9a:1e:77:49:
93:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136526
sbgp-ipAddrBlock: critical
IPv4:
103.91.217.0/24
103.99.208.0-103.99.210.255
IPv6:
2404:3e40::/32
Signature Algorithm: sha256WithRSAEncryption
7b:1a:77:b6:7a:ee:de:28:aa:9f:08:77:7e:31:8e:c6:5b:c1:
3d:56:9f:9d:e3:d8:03:c0:77:9f:74:ea:a4:fb:6c:52:68:81:
9b:9e:5b:b7:6d:b1:fb:83:a8:98:3b:3a:89:5a:b0:77:c6:3b:
31:47:56:b7:d6:e0:7b:d5:43:6c:b9:ec:4d:2b:51:02:1a:cb:
68:a2:d3:b9:d4:f5:0b:99:fb:15:66:d0:67:52:ec:1e:32:dd:
b0:ae:10:bb:cf:f0:d8:16:81:a1:b7:65:ea:c8:66:56:f3:d4:
08:9c:e1:7e:ce:05:50:22:ca:d5:5f:13:50:b0:a5:09:69:0b:
de:4c:b5:f5:20:b1:99:ac:0c:35:f4:4e:89:f0:49:e3:91:b4:
11:1a:b2:de:22:d3:7e:d0:41:38:6f:30:65:73:a2:11:a5:3d:
f8:bb:4f:25:54:dd:eb:79:11:6e:7b:12:dc:d9:bb:d8:ec:50:
e0:84:35:ef:87:76:91:10:2d:28:0a:8e:34:7c:2f:41:7e:20:
a9:56:bb:9a:8b:97:3f:15:3e:02:ec:a6:7b:19:c4:72:0b:40:
e4:04:70:80:5c:73:53:8f:a2:0d:63:27:e8:9a:76:69:13:eb:
cc:11:8a:05:c7:7c:da:17:87:02:33:86:d8:86:f9:2d:e5:47:
f9:b8:06:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:05:02 2026 by rpki-client