Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLD8GMGnr_U_g8qyYGJTXSzF7m8.cer
File: JLD8GMGnr_U_g8qyYGJTXSzF7m8.cer (raw, json)
Hash identifier: iiZe25TaN64ImMFGg6x1UX9+EncjV1jfNhy/NEgOguM=
Subject key identifier: 24:B0:FC:18:C1:A7:AF:F5:3F:83:CA:B2:60:62:53:5D:2C:C5:EE:6F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CDFF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/JLD8GMGnr_U_g8qyYGJTXSzF7m8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 18 Aug 2026 12:50:54 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 140711
IP: 103.152.18.0/23
IP: 2406:25c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 13:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183807 (0x2cdff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 18 12:50:54 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A9150A9C, serialNumber=24B0FC18C1A7AFF53F83CAB26062535D2CC5EE6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7d:5e:27:c7:78:5d:83:e4:c1:d3:87:8b:dc:
2c:1b:8f:5a:8b:c6:d6:92:72:19:40:5c:da:47:a8:
cc:66:4d:85:f0:c3:e3:13:54:f6:df:00:09:bc:7a:
38:1e:fd:05:68:20:5a:80:3e:93:e6:d2:9c:78:3b:
0c:94:73:98:e7:ad:72:fe:cc:6a:20:57:a5:d5:29:
d5:46:59:91:97:7e:5a:5d:8d:15:36:cd:6d:e7:cc:
6c:7e:69:0f:bb:96:58:d4:27:d9:f0:52:97:c8:6d:
e1:43:69:d4:d5:36:4e:95:be:00:91:9e:3e:da:72:
05:c4:e7:31:c0:66:e1:a7:be:93:9a:ec:8b:f7:6d:
b1:c0:ec:e5:93:39:1a:58:03:93:27:b4:f1:14:a8:
72:17:e1:28:ee:e0:e4:ee:31:e8:29:9b:56:87:8b:
64:e8:d8:54:85:3b:91:10:79:7f:57:5b:d1:68:ca:
49:45:bd:91:71:1a:8a:ea:21:a9:87:31:49:d8:29:
ff:26:71:63:7d:05:e7:00:94:42:39:71:62:ea:dc:
f1:9a:9b:e2:01:de:ef:ac:b0:e8:a7:d3:a0:3f:08:
6c:20:cf:72:46:cf:57:26:1f:9c:c4:12:66:1a:fc:
ca:b3:b0:36:6f:1f:7d:0f:6a:66:58:86:78:c3:08:
56:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B0:FC:18:C1:A7:AF:F5:3F:83:CA:B2:60:62:53:5D:2C:C5:EE:6F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/JLD8GMGnr_U_g8qyYGJTXSzF7m8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140711
sbgp-ipAddrBlock: critical
IPv4:
103.152.18.0/23
IPv6:
2406:25c0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:87:11:02:58:57:dd:ab:8d:79:ab:f6:86:f9:57:a6:2b:6b:
fe:3e:b5:4c:98:ee:4a:a2:30:30:ee:df:2d:94:4c:fc:d4:97:
8d:1b:0a:48:9f:ef:fe:f6:54:06:dc:5a:99:9e:1b:b2:2c:69:
b8:2c:17:e6:85:4a:8d:eb:61:29:1b:7a:9b:23:05:dc:fc:e7:
9f:6e:cd:fb:da:0e:c9:d0:c0:1f:87:8a:06:3e:d4:f0:ea:3b:
b7:19:d8:40:c2:b0:8e:3b:19:c2:2b:96:d3:4c:36:a7:63:aa:
15:cf:ac:f3:c4:f2:eb:48:97:d0:2d:dc:88:c3:71:eb:48:3f:
bd:12:bf:0b:23:20:fb:95:fe:cd:22:ac:49:c5:42:1e:4e:53:
71:62:de:bc:f5:63:8a:97:f9:3a:42:65:49:b3:ed:ca:22:55:
30:67:16:a2:8a:f1:54:e0:10:f0:cf:1e:c4:5d:c1:3e:ac:9f:
4d:aa:b0:ee:32:df:8d:07:5f:d6:cd:0c:9b:fb:9e:80:a8:65:
27:7a:0a:18:9f:29:93:8a:37:93:40:a0:cc:66:af:cf:19:c2:
74:5f:32:6d:db:68:41:2a:34:65:ec:e6:34:e0:38:43:93:eb:
e8:29:cd:1d:71:82:e2:c8:80:4b:ea:6d:08:36:cb:bd:51:3c:
45:88:e5:f5
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAs3/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDgxODEyNTA1NFoXDTI3MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTBBOUMxMTAvBgNVBAUTKDI0QjBGQzE4QzFBN0FGRjUzRjgzQ0FC
MjYwNjI1MzVEMkNDNUVFNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCcfV4nx3hdg+TB04eL3Cwbj1qLxtaSchlAXNpHqMxmTYXww+MTVPbfAAm8ejge
/QVoIFqAPpPm0px4OwyUc5jnrXL+zGogV6XVKdVGWZGXflpdjRU2zW3nzGx+aQ+7
lljUJ9nwUpfIbeFDadTVNk6VvgCRnj7acgXE5zHAZuGnvpOa7Iv3bbHA7OWTORpY
A5MntPEUqHIX4Sju4OTuMegpm1aHi2To2FSFO5EQeX9XW9FoyklFvZFxGorqIamH
MUnYKf8mcWN9BecAlEI5cWLq3PGam+IB3u+ssOin06A/CGwgz3JGz1cmH5zEEmYa
/MqzsDZvH30PamZYhnjDCFZNAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUJLD8GMGn
r/U/g8qyYGJTXSzF7m8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTUwQTlDLzJBMjk0ODRDQUJBODExRUE5NUNFMkMxNkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1MEE5Qy8yQTI5NDg0Q0FCQTgxMUVBOTVDRTJDMTZDNEY5QUUwMi9KTEQ4R01H
bnJfVV9nOHF5WUdKVFhTekY3bTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiWnMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ5gSMA0EAgAC
MAcDBQAkBiXAMA0GCSqGSIb3DQEBCwUAA4IBAQAuhxECWFfdq415q/aG+VemK2v+
PrVMmO5KojAw7t8tlEz81JeNGwpIn+/+9lQG3FqZnhuyLGm4LBfmhUqN62EpG3qb
IwXc/Oefbs372g7J0MAfh4oGPtTw6ju3GdhAwrCOOxnCK5bTTDanY6oVz6zzxPLr
SJfQLdyIw3HrSD+9Er8LIyD7lf7NIqxJxUIeTlNxYt689WOKl/k6QmVJs+3KIlUw
ZxaiivFU4BDwzx7EXcE+rJ9NqrDuMt+NB1/WzQyb+56AqGUnegoYnymTijeTQKDM
Zq/PGcJ0XzJt22hBKjRl7OY04DhDk+voKc0dcYLiyIBL6m0INsu9UTxFiOX1
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:16:46 2026 by rpki-client