Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer
File: TH2sISA9rkFsH87q_FVlcgIiCKE.cer (raw, json)
Hash identifier: nxrxSV+Ab9XaQ+1Wm/rbt+PqoDgIYjfjYi0sWL655vg=
Subject key identifier: 4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CBA8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 06 Aug 2026 13:48:08 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 151501
IP: 103.235.162.0/23
IP: 2001:df2:aa40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183208 (0x2cba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 6 13:48:08 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91C0CD5, serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:74:ca:5f:9d:81:59:42:74:b4:dc:1f:cf:
fb:17:e8:85:67:d2:8f:6a:d9:85:54:fc:69:d1:b5:
b4:52:19:df:eb:14:3b:2a:e1:c4:2d:eb:63:de:c6:
02:76:37:b2:17:ce:f1:63:57:d8:cc:88:0c:a8:25:
27:8c:93:76:96:f9:fb:73:63:19:29:18:b4:84:ef:
64:e8:7a:97:bc:dd:47:6b:47:62:e3:27:d2:e8:c3:
8b:ed:23:d4:a9:86:0a:e8:3c:56:68:90:6c:8f:bb:
ac:66:38:3d:b0:4f:86:d5:00:9f:81:bb:63:d2:3b:
3d:45:60:25:90:a3:9d:f8:8f:8d:9d:4a:b7:00:36:
22:f1:60:3b:80:cf:d9:88:01:69:2e:2a:a8:e0:20:
08:ee:eb:29:a6:a4:5d:75:33:b8:43:8c:62:52:bf:
07:e4:44:58:ee:f1:9f:98:fd:5e:e5:29:c8:6f:eb:
43:63:76:35:97:b3:72:bc:84:9c:6a:b8:45:1e:05:
a8:71:c3:30:3e:b9:48:93:80:8a:6e:23:ff:be:f2:
b7:05:19:83:1b:ff:ee:d2:8f:79:7f:f2:c2:5c:5e:
42:be:36:46:73:d8:c5:1e:0c:d9:75:bf:c5:76:c7:
44:3c:c3:5f:20:91:e7:cb:29:7e:dc:5e:11:b9:58:
17:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151501
sbgp-ipAddrBlock: critical
IPv4:
103.235.162.0/23
IPv6:
2001:df2:aa40::/48
Signature Algorithm: sha256WithRSAEncryption
2b:b9:58:a5:a7:03:ad:27:0e:18:47:66:dd:76:b5:80:37:de:
d3:e6:3b:a1:3d:85:c7:f8:02:fd:a5:3e:b9:78:5d:f5:00:47:
0c:f9:6b:67:65:39:4a:9e:3d:a0:4f:6a:03:b3:d8:eb:78:47:
46:44:b0:ec:64:d5:67:55:af:19:5f:35:96:d7:d3:49:a4:2e:
38:4b:ac:79:0d:12:8d:31:3c:fa:70:59:66:f7:45:88:bf:88:
4e:e6:21:42:fc:c2:5a:5c:ba:46:1a:58:0b:b9:bf:1b:2a:3e:
94:ad:4f:10:1e:fb:49:c3:58:d2:17:a2:13:f9:f1:63:0b:ba:
83:04:59:6f:f5:5b:42:ef:77:85:cd:77:be:a6:3f:e2:14:a4:
c9:23:7c:d5:cc:8a:44:02:4e:1c:61:b7:da:2d:fa:02:78:bf:
cd:82:1b:d9:7b:b0:23:8d:a7:a2:f2:53:73:4f:78:2a:3a:71:
a4:da:b1:27:db:e7:60:1d:30:62:67:59:a7:db:4a:78:29:7f:
4f:7c:d2:61:6a:78:7c:46:6f:40:c4:ae:9a:54:40:f9:20:2e:
74:93:07:28:d8:ba:a4:60:d9:32:4e:02:b8:a9:b8:41:77:d2:
17:2c:66:8c:42:95:4b:d0:ef:18:4b:5b:ff:d0:98:f2:63:91:
95:1e:87:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 10:46:37 2026 by rpki-client