Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer
File: PQaSnY1eH2juI-yj-UjP96LklbM.cer (raw, json)
Hash identifier: TdtYnr/l1OyQtgwkfMIPMyB0Lw1GylDPYOnxPA46Mt8=
Subject key identifier: 3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D9C5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 30 Sep 2026 14:18:46 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 139223
IP: 103.139.253.0/24
IP: 103.175.127.0/24
IP: 2001:df0:a080::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186821 (0x2d9c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 30 14:18:46 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91DDCD9, serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:d2:9d:13:9d:15:1a:5c:4f:98:54:34:8b:
97:aa:85:4e:d6:cc:36:1e:b8:c4:04:84:60:75:c2:
01:25:8e:5d:50:a9:54:c6:bb:b0:6f:f1:f8:5c:62:
13:9c:c6:2d:b0:4b:57:f9:bc:3b:52:e5:9c:2a:1d:
31:31:7e:06:8b:26:c1:92:89:0f:b1:03:46:60:00:
5c:6f:81:be:d4:3c:5a:0d:0e:04:1f:65:08:6d:41:
12:22:ad:c6:ef:ef:b5:2b:c7:7b:0b:c0:0a:ca:35:
e1:77:7f:73:a1:0b:dd:46:3f:e7:04:c4:e3:b4:e7:
2d:12:b9:59:54:5a:fa:38:dc:2d:68:e0:ef:a0:63:
54:74:5f:80:66:73:70:ed:f1:07:80:10:fd:7d:0d:
dd:f6:f6:df:a5:2e:e5:ff:8d:07:8b:63:9c:13:f9:
cb:08:55:d7:0a:73:7d:30:02:d4:6e:4c:67:04:97:
7a:1d:8e:e8:e5:11:01:fd:c6:fa:55:b7:ff:ee:8d:
c8:70:a1:6e:af:4b:e2:d3:61:eb:f1:b9:88:a1:e9:
41:04:4e:9c:f6:48:ab:54:19:37:a0:1a:03:9b:90:
5c:33:77:73:c0:30:ff:9a:01:ad:bd:40:2e:a5:f0:
66:c9:41:2f:ee:8c:4a:f2:29:26:ac:37:65:53:9d:
61:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139223
sbgp-ipAddrBlock: critical
IPv4:
103.139.253.0/24
103.175.127.0/24
IPv6:
2001:df0:a080::/48
Signature Algorithm: sha256WithRSAEncryption
ba:e7:e1:f0:1d:66:ce:2f:36:28:95:55:8f:43:62:7a:b4:7c:
1e:b4:fa:4c:2b:63:28:9b:e6:8b:6a:d0:9e:c0:05:87:75:3e:
9d:b7:e3:23:ff:06:89:2e:04:f9:2c:e9:72:3c:34:72:f0:2d:
ea:45:d3:44:d7:4e:d6:af:13:84:bf:0d:30:22:f1:ca:0a:9f:
06:cc:e8:d5:93:0d:3c:4f:ed:42:d3:1c:ae:64:77:80:b5:b8:
07:f4:a5:e9:30:e4:8c:cc:dd:74:c6:71:e4:d0:84:2e:31:7c:
e4:14:a6:10:f6:69:a6:5a:96:52:29:a1:21:4d:55:1a:20:fe:
a3:52:27:23:aa:f5:99:c4:f4:71:da:fa:90:8e:b4:4a:5a:40:
e0:9d:12:59:a0:e7:0e:82:14:09:09:c0:d1:75:11:39:08:54:
fd:ca:fe:39:e0:aa:9f:83:dd:17:c8:83:44:ed:8f:90:48:bc:
4e:03:d6:17:ec:b0:85:d6:b8:22:b4:87:db:c5:32:c9:1f:ec:
c3:38:8a:38:6b:f9:06:9d:92:d9:48:75:e3:c0:54:be:f5:f3:
71:5c:08:64:c7:fd:e0:c5:39:5f:67:55:de:02:fb:c1:97:5f:
80:6f:da:91:2c:ba:0a:3c:aa:84:1e:91:a2:87:9f:67:1f:ef:
9e:b5:0f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:55:45 2026 by rpki-client