Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
File: M3je4rOhqNPtGvTkXiJdAJnPcBE.cer (raw, json)
Hash identifier: kakKFTPZG8S/gdfxs68xNdNOaI4tJb7yVNNiz6NMJw0=
Subject key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A38B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 10 Mar 2026 13:11:40 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 149474
IP: 103.180.112.0/23
IP: 2400:52a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172939 (0x2a38b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 10 13:11:40 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A915B556, serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:cd:d7:b1:d9:5c:77:d6:f6:0e:37:33:b0:
99:21:94:23:cd:45:53:7c:d8:85:bf:24:7b:f5:51:
c7:de:3c:60:11:bf:33:ac:4f:d7:df:ee:94:8c:3b:
a3:c7:29:85:5c:2a:49:04:ca:34:e9:02:d7:37:8e:
65:aa:93:20:4b:ee:3e:b7:5f:31:e1:00:11:1a:74:
aa:f6:fd:08:fc:79:c1:d7:0e:4e:ba:7c:ff:a3:d6:
90:67:d6:87:36:c7:fa:ee:08:92:ef:e1:48:f2:22:
7d:2e:f3:f7:ec:c7:c0:37:15:1c:1a:5e:8b:e6:0a:
0b:4e:90:3f:76:ce:57:63:a2:c4:03:a3:61:bf:26:
52:25:10:91:a0:d2:0f:ef:99:e4:ba:89:db:31:9e:
85:fd:a5:2d:4f:56:60:b7:1f:8e:97:62:69:10:55:
8e:d0:32:9c:98:63:46:05:31:8c:b7:da:d0:1b:86:
38:dd:77:1e:7b:51:00:0c:54:2f:57:ff:da:e4:b3:
be:66:0d:47:9f:2c:83:7b:f4:0b:ba:f1:43:87:f2:
f6:77:2f:08:4e:1e:63:f5:6c:14:9c:c5:4b:16:75:
49:3d:eb:0d:72:e0:bd:2b:9b:53:f0:e1:63:40:7a:
db:46:c5:5b:ba:43:2a:4f:13:74:9a:dc:ab:55:37:
57:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149474
sbgp-ipAddrBlock: critical
IPv4:
103.180.112.0/23
IPv6:
2400:52a0::/32
Signature Algorithm: sha256WithRSAEncryption
87:96:1c:69:88:4a:92:b5:8b:5d:4b:a6:56:b9:4a:e6:6f:3f:
4b:68:79:e3:11:b3:be:02:47:e4:54:fe:62:e5:d9:76:a0:89:
a0:9b:e5:ac:42:cb:07:d7:ce:39:c8:bf:7c:7d:c2:65:a1:d5:
1e:9b:53:88:0f:e1:e0:e7:2a:59:2d:df:fe:dc:71:ee:79:6b:
cc:cd:77:36:7d:e7:c3:fe:a7:0f:58:fc:f6:c3:7e:a1:8b:b9:
18:21:8a:7e:2b:1b:84:8c:6f:8c:66:5e:41:57:9f:bb:c3:e3:
92:e5:53:d2:19:8a:9b:bf:67:cb:b4:b8:41:7e:e8:41:e1:01:
3e:9c:b5:52:24:a3:54:7d:a4:23:4f:8b:28:cb:bc:01:ca:8e:
da:34:c3:8e:62:64:6f:1c:a2:21:63:42:ed:4f:4b:79:31:b6:
b5:cf:5b:81:c7:68:e2:46:74:71:70:61:6b:94:e0:5d:11:95:
c0:41:cb:48:02:62:24:19:36:ea:0b:c9:40:38:75:bc:75:03:
79:90:a3:40:63:90:a1:7f:4e:70:d0:72:ca:e5:ce:b1:14:2d:
df:d6:1f:4c:75:7c:30:a3:32:95:7b:52:c7:7c:90:5a:54:f6:
0c:a5:88:cb:ab:39:fe:58:ad:61:6b:56:74:0a:ec:b7:59:62:
e9:cd:2d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:09:22 2026 by rpki-client