
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgsYrQYRJBRHJt7_8xSbZae-e10.cer
File: DgsYrQYRJBRHJt7_8xSbZae-e10.cer (raw, json)
Hash identifier: EBuVKo+Spa0H+shX9M4P2fAGa87bDXXNPzp1RzzHhMU=
Subject key identifier: 0E:0B:18:AD:06:11:24:14:47:26:DE:FF:F3:14:9B:65:A7:BE:7B:5D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B577
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91631DC/C5039520532C11F1B0E78C21C7833773/DgsYrQYRJBRHJt7_8xSbZae-e10.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91631DC/C5039520532C11F1B0E78C21C7833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 19 May 2026 02:45:23 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 38814
AS: 134157
IP: 45.120.180.0/22
IP: 103.60.248.0/22
IP: 2401:87c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177527 (0x2b577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 19 02:45:23 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91631DC, serialNumber=0E0B18AD061124144726DEFFF3149B65A7BE7B5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:2d:0a:ea:8e:28:4b:39:84:80:b9:a8:aa:
2b:e2:6d:c2:4f:74:3c:d3:08:0d:2d:91:5e:1b:16:
5a:a2:d1:db:de:e0:5d:dc:49:40:4d:ec:3e:f2:61:
f3:04:be:69:7b:ad:72:29:0c:2f:13:05:4f:d2:a3:
34:79:c7:31:3f:ac:a8:ef:e1:84:ff:77:d3:c5:09:
1d:04:78:11:c5:1a:cf:9a:f8:c5:42:24:79:f4:93:
56:16:06:d3:1e:5b:e1:2e:7f:0f:75:64:f3:8d:ce:
95:19:ac:63:c9:25:89:f2:ad:41:20:14:20:2e:d4:
ce:36:03:89:26:90:46:72:54:10:9b:83:9a:2f:55:
3b:78:43:d1:c1:33:58:3e:53:31:4c:f5:3c:2d:d2:
4a:95:3c:ae:1e:46:3c:e8:a0:1e:f7:01:2d:a6:7a:
d1:72:bd:10:45:0b:a3:61:ea:8e:86:2e:1a:f5:a2:
8f:07:1d:ae:43:45:57:3a:13:8e:b5:b4:99:e8:4a:
0e:84:24:f1:5c:c9:5f:b8:b2:95:fa:e9:61:f3:9c:
43:0d:e7:6c:cd:79:11:be:f1:40:99:97:18:a7:e3:
68:d0:4e:57:bb:90:6e:23:40:69:25:90:44:99:2c:
6b:1d:5c:23:84:1b:57:d2:f9:3a:a6:81:12:b7:ea:
62:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0B:18:AD:06:11:24:14:47:26:DE:FF:F3:14:9B:65:A7:BE:7B:5D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91631DC/C5039520532C11F1B0E78C21C7833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91631DC/C5039520532C11F1B0E78C21C7833773/DgsYrQYRJBRHJt7_8xSbZae-e10.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38814
134157
sbgp-ipAddrBlock: critical
IPv4:
45.120.180.0/22
103.60.248.0/22
IPv6:
2401:87c0::/32
Signature Algorithm: sha256WithRSAEncryption
79:4d:e2:c7:3a:19:a9:05:f5:41:05:d5:10:a3:af:a7:50:8f:
db:a3:d2:29:14:c1:98:79:cd:31:29:b4:ef:77:b4:48:63:ae:
2c:0c:92:23:fb:f7:ec:8e:ea:20:b2:2e:f6:fd:90:d5:5e:64:
ba:46:0c:91:17:ce:3e:96:47:09:22:5b:dd:f9:7e:25:8f:ff:
9b:59:51:71:28:12:4a:cc:10:a7:29:86:9f:c4:19:f5:54:57:
4b:82:13:f0:9c:67:73:4f:a0:c1:b0:a7:54:c8:5b:d7:7d:dd:
20:80:a0:6d:1c:3b:a4:f1:d6:89:f6:9c:58:22:ed:ca:33:03:
56:75:cd:dd:53:37:75:88:76:ba:ef:1b:9d:4a:89:6a:b9:47:
19:f2:7e:97:6f:2b:f3:ce:56:c2:f1:c4:74:54:fa:27:ec:86:
90:23:51:08:f4:59:1d:40:22:55:02:93:a3:d7:aa:0d:d2:dd:
c5:ed:ea:9d:07:a2:a7:68:f8:8f:0d:cf:e2:ea:58:b6:64:58:
d9:fd:e1:89:a5:35:2a:02:ea:8d:dd:79:02:4c:a6:07:69:9a:
9d:1c:16:47:e2:57:ce:e9:7b:ff:2f:f4:8e:99:3b:71:95:00:
05:e0:be:e9:27:d3:5d:0c:1f:e8:d0:58:e5:51:2e:58:ad:fe:
9b:4e:c5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 08:40:45 2026 by rpki-client