Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer
File: N6CiG7WFEffv59KwRIPtgLSgIzo.cer (raw, json)
Hash identifier: spCMF5d88bsTP+1MJoSgWtJiUeESpOtbu+VOj9FCkvs=
Subject key identifier: 37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A78C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 30 Mar 2026 14:34:45 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 149643
IP: 103.183.106.0/23
IP: 2400:6260::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173964 (0x2a78c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 30 14:34:45 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91C456F, serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:02:92:2f:fe:64:e0:29:ef:c2:7e:8e:8b:
03:c6:d3:81:37:fd:7e:b4:f0:d0:74:11:f1:34:15:
69:2d:97:db:c6:ed:b7:57:4b:77:b2:ba:52:05:77:
54:21:4b:89:01:8a:d3:d3:db:18:89:13:cc:7e:fe:
bb:15:a2:82:c7:95:bf:77:36:cd:51:8e:27:6a:9d:
ec:d0:eb:e3:e5:93:fd:64:d5:7c:b4:16:8b:f9:ab:
30:ad:ca:04:89:45:3b:3a:d5:0c:d5:02:0f:97:cb:
ab:98:86:40:38:69:48:26:44:7d:ad:24:a9:83:74:
c7:ab:6d:bb:56:04:85:77:6f:69:83:42:07:0c:b3:
ba:06:95:f8:d3:d2:4e:5b:a5:1e:67:8a:79:16:5a:
c7:5d:12:ee:e1:94:01:1a:4a:0f:3c:34:ac:8d:60:
ac:53:92:40:7b:1c:ca:06:10:76:83:bd:bb:72:32:
55:6b:97:ea:ea:68:36:9e:7d:69:fc:c2:3b:14:f7:
c6:5f:54:a2:b5:3f:a0:a2:7f:65:e3:8d:71:42:e1:
4a:a5:96:82:c2:41:b8:58:47:89:4c:bb:90:7e:f1:
7e:c5:fa:39:7d:34:a1:95:c9:b6:00:ca:71:60:77:
ab:2d:53:b1:90:2d:f2:88:d3:9d:87:bb:27:78:7c:
70:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149643
sbgp-ipAddrBlock: critical
IPv4:
103.183.106.0/23
IPv6:
2400:6260::/32
Signature Algorithm: sha256WithRSAEncryption
d4:cf:7c:e6:a1:af:fa:36:a4:fc:fc:20:7a:4b:75:1c:75:73:
41:58:bc:aa:ba:6a:ce:a7:9c:ca:ba:be:10:44:96:43:9f:e3:
1f:71:27:7a:20:52:4e:f2:a6:4a:fc:d8:7f:e7:38:c2:c7:8d:
5c:8b:37:aa:f6:e3:c5:d1:58:02:d4:12:89:6e:00:07:36:4e:
34:9f:17:a7:fe:d7:91:ad:51:0d:ea:be:fb:47:3d:38:da:33:
33:89:9b:e2:07:bf:e1:06:23:14:cc:bd:b5:b7:00:f3:28:51:
91:3a:d8:f2:76:b6:ac:ca:07:87:b9:21:65:31:ce:4d:11:51:
95:03:a3:b0:66:e8:86:10:fe:0d:b1:8f:3c:cc:3c:a1:4f:f8:
29:f8:a3:b5:a6:06:03:01:c3:a8:f8:d6:77:91:36:eb:34:37:
38:16:84:b2:ea:a6:bf:80:75:92:cf:81:90:62:cb:87:97:e6:
60:ed:20:b6:98:80:31:c2:8f:61:a5:11:e4:25:08:63:a3:9e:
09:5c:07:4d:ff:b0:52:bb:a2:2b:c9:b1:9a:78:0d:b6:26:8d:
7f:1e:49:fc:aa:da:9e:6d:8c:68:a2:ae:7b:f9:c3:f4:d7:8e:
dc:36:92:b1:13:7a:28:ed:25:c4:27:62:83:68:ae:f5:8d:22:
81:33:00:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 07:15:17 2026 by rpki-client