Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer
File: KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer (raw, json)
Hash identifier: TJpSjjiV+pXgzXa2IVS/3OZyacJuro4/NyaB5Es28CM=
Subject key identifier: 2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C9C1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 01 Aug 2026 03:08:29 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 149838
IP: 103.187.190.0/23
IP: 2001:df0:bec0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182721 (0x2c9c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 1 03:08:29 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9171927, serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:b6:7b:ba:28:6e:3b:4b:ad:9d:d8:4a:21:
31:e9:b8:02:38:83:ca:72:4a:2a:54:91:f1:02:56:
2c:69:3f:8d:e3:b0:44:c0:14:f1:dd:c0:c0:4b:fd:
a8:9c:2f:91:b6:9c:b7:75:65:4f:25:a8:4a:c3:58:
27:5a:d9:ca:17:03:87:56:47:e2:74:e7:3d:97:22:
11:cd:2d:de:2f:3f:72:2d:3a:57:1e:a6:d4:eb:67:
eb:0a:3e:47:69:d5:23:db:11:a6:a9:35:4f:89:05:
b6:77:ad:54:df:77:6b:e4:5f:15:1f:78:3a:7d:0e:
01:fc:69:d2:96:d2:65:4b:82:4d:d9:d6:61:1b:8d:
71:0f:72:18:38:eb:21:f2:d9:ac:2c:fa:ad:72:ec:
09:ad:f1:c9:f8:6e:f9:96:1a:c5:8b:d8:c0:55:8c:
20:13:c9:3c:63:5b:0c:24:22:35:2c:b0:3b:46:56:
21:d3:47:e2:65:ec:25:24:4e:2b:bb:fa:2c:bb:80:
5c:f1:6c:54:95:85:86:68:ff:0e:9b:61:19:de:f6:
68:7a:2c:4b:38:70:7b:57:28:a0:5d:2e:7c:bf:80:
97:f0:fc:a1:2f:0d:b3:a5:ee:65:42:5b:0a:6d:ae:
41:db:84:6b:78:5a:44:3c:36:93:34:98:ca:9b:25:
63:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149838
sbgp-ipAddrBlock: critical
IPv4:
103.187.190.0/23
IPv6:
2001:df0:bec0::/48
Signature Algorithm: sha256WithRSAEncryption
0d:14:94:09:54:98:f5:f7:38:8b:6e:09:70:a4:8a:d5:c0:54:
b1:20:be:a3:8e:32:31:d8:13:fb:73:4b:34:ce:03:10:6a:5f:
85:29:e2:96:5f:5d:73:b2:0b:17:cd:c2:5c:43:1e:e9:28:8d:
5a:bf:9c:cd:68:d0:60:9d:6c:e7:f7:cb:79:6d:59:c7:18:e2:
f3:c0:2c:8a:0c:f8:11:0a:ac:75:0c:51:42:37:f8:40:c2:31:
19:ee:ed:03:3a:8d:90:2d:fb:9c:f4:2c:67:a5:41:b6:a4:a9:
01:6f:7c:5e:cd:8f:bf:4d:08:60:57:c0:f5:a3:44:4e:61:17:
ad:42:06:d0:c7:25:de:0d:68:71:45:98:8c:3c:ff:96:22:51:
b5:40:1b:1b:6d:06:bc:69:af:4c:2c:13:b7:c5:24:15:c2:14:
43:1a:cb:dc:25:46:8a:65:4f:85:ff:7f:f3:f9:2b:c9:29:47:
78:19:0f:cd:0e:79:6e:92:32:83:e7:1b:7e:5c:dd:b2:98:65:
f1:f1:d7:52:57:fe:c9:d7:2a:ad:3b:26:87:bd:56:a0:6b:71:
e2:30:ba:31:b6:b4:70:9b:64:b9:cd:00:5d:f7:f8:24:a8:94:
7b:a4:36:df:37:31:52:4b:ec:8e:53:d5:3e:5d:ac:14:44:e6:
d7:9b:49:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:40:13 2026 by rpki-client