Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
File: GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer (raw, json)
Hash identifier: V3QaHPNGuuu2gUNvHaMqL83mS5W7Y2rBGYEJvS9HSDc=
Subject key identifier: 18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CAFE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 04 Aug 2026 14:36:06 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 141987
IP: 103.191.74.0/23
IP: 2400:b660::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 12:32:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183038 (0x2cafe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 4 14:36:06 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91AE69C, serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ec:aa:ab:0f:0d:20:2b:e3:8a:1a:5b:34:ca:
c6:a9:7f:f5:9d:05:88:6e:ca:0b:d9:ba:03:20:00:
d8:a7:f0:9b:55:22:7f:66:51:da:ae:89:70:f5:64:
58:2f:82:d3:c8:2a:fa:a1:c1:d1:0c:ba:58:f0:4b:
be:50:dd:a8:fe:a1:17:b1:17:03:fd:72:82:62:5c:
a7:5a:7f:ab:bb:50:9e:62:be:fb:90:f5:6e:86:91:
eb:43:24:c3:9e:38:0b:c1:9a:0b:cd:34:5c:f7:02:
65:d5:1e:0f:ee:1d:65:d7:85:e5:6e:6b:cf:e7:29:
e7:0f:05:92:00:8b:7d:0a:51:11:e9:43:d6:0d:d0:
b0:56:4b:24:d7:fd:73:84:c2:29:7b:bc:1f:5c:43:
84:19:36:2c:ae:e2:18:65:dc:f4:5a:42:11:01:69:
e1:89:61:ae:89:ca:55:60:a5:34:aa:de:41:76:42:
1d:2c:33:db:a4:f6:c2:29:5a:c0:70:fd:06:5b:0b:
bf:73:cb:62:38:aa:cd:2f:51:e0:a2:13:1c:3e:60:
66:c0:9a:bf:66:9e:c5:6a:b3:7a:04:38:27:c0:b1:
2f:3b:1f:b3:ea:3d:63:43:17:d6:cc:a5:ab:a8:64:
02:91:a4:4d:32:56:f9:00:fd:ee:53:e7:cb:b1:fc:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141987
sbgp-ipAddrBlock: critical
IPv4:
103.191.74.0/23
IPv6:
2400:b660::/32
Signature Algorithm: sha256WithRSAEncryption
12:0f:2d:70:f3:f0:45:db:42:ae:72:da:17:80:2b:05:00:fd:
c6:c6:bf:98:64:ff:3e:05:ba:19:ad:f1:29:72:ac:73:3c:d1:
88:36:bf:36:98:c0:ab:17:fd:46:ee:45:6f:09:3e:41:94:aa:
ec:24:5a:5e:4c:51:37:dc:9e:38:92:8c:bc:20:99:1a:be:f9:
0d:40:c8:ca:b4:34:fe:8d:8e:11:87:0b:1a:c9:d5:ac:23:b3:
41:71:b2:5e:9b:05:02:68:6d:d5:68:44:bd:89:14:01:ba:2a:
fe:f6:9a:94:d5:ff:f8:22:0e:3b:ba:df:7d:76:2b:01:8b:c9:
cc:7c:aa:d2:aa:c4:90:f3:43:b7:26:f6:05:96:3e:0d:99:bc:
18:f0:f2:9e:6e:29:f3:c9:6d:10:b3:50:38:bb:28:2d:4f:ea:
ac:88:cd:6d:00:b0:58:70:8a:35:2b:0c:e8:1f:d2:eb:79:4b:
a0:d0:2b:f1:c0:79:91:a9:65:f4:f8:9c:46:2e:c6:b1:28:d9:
1d:70:33:07:65:4e:73:9e:d7:b8:e9:9b:d6:67:c2:4f:64:3c:
27:9b:cc:9a:d6:bb:ec:2a:70:e2:96:2f:b9:85:e7:2e:50:c0:
9a:d6:fd:ad:46:5f:37:27:c3:36:07:cb:f2:4a:ee:6f:c5:09:
67:64:10:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:46 2026 by rpki-client