Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer
File: WWtkT4ORAfVZi9Egyt6VSFGgzko.cer (raw, json)
Hash identifier: 9qhwSrhOkb2cHsg1wyya9z+7p+StuJMl2sujSFrED9s=
Subject key identifier: 59:6B:64:4F:83:91:01:F5:59:8B:D1:20:CA:DE:95:48:51:A0:CE:4A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A3DD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 12 Mar 2026 00:54:13 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 45511
IP: 203.148.93.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 13:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173021 (0x2a3dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 12 00:54:13 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91AC1CF, serialNumber=596B644F839101F5598BD120CADE954851A0CE4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:82:cb:0a:98:ba:47:b3:b2:3a:97:c2:96:d1:
85:d7:83:0f:2f:21:70:c9:f3:1c:4a:51:e0:57:e3:
9a:5e:2e:f0:24:3b:d5:a6:16:05:97:c2:0a:e5:85:
34:71:d6:36:0b:e8:b6:8f:2c:60:e6:2e:f9:be:80:
1c:00:67:2f:16:eb:c1:45:e0:79:be:81:ee:38:29:
c7:07:86:ec:f4:33:dc:3a:72:07:d7:3e:e8:1c:d3:
79:2b:b4:e9:2c:fd:fd:ae:e2:d3:9e:bf:47:38:a1:
68:c7:65:6a:12:8b:b8:42:b8:b3:14:7e:3e:0f:29:
f0:f5:d1:98:00:9c:31:38:60:51:7e:72:77:59:9c:
7c:79:36:82:b6:6e:d4:b0:9f:84:37:bf:7e:82:8a:
64:87:9d:58:f0:2a:e1:e3:e7:a4:a1:81:1c:64:ef:
2f:36:8a:d7:f6:a2:c9:6d:4b:29:c5:93:00:b0:46:
c9:66:8e:c9:08:ac:75:0c:e6:22:bc:e0:7a:44:2e:
21:c1:47:33:88:1a:71:dd:0a:e2:fb:3c:e7:4d:93:
37:a5:e6:5e:ea:8e:75:c2:40:c6:6c:1c:7b:a3:9e:
19:96:16:c1:a2:d4:78:fc:18:b6:21:7b:8f:e3:59:
ca:89:11:35:37:8c:12:a3:b3:52:c7:76:a3:40:f6:
97:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6B:64:4F:83:91:01:F5:59:8B:D1:20:CA:DE:95:48:51:A0:CE:4A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45511
sbgp-ipAddrBlock: critical
IPv4:
203.148.93.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:8a:f3:6c:94:f4:bc:9b:b0:d6:2e:52:83:3d:63:9d:5d:aa:
05:f3:fd:8e:01:b7:76:96:fa:31:d0:27:8d:72:0a:2c:df:cb:
3c:a7:70:39:1e:22:97:39:48:04:e0:52:2f:94:24:ff:61:22:
10:85:1e:1b:82:04:fa:8b:c3:ba:61:4c:f8:14:ce:f6:dd:3a:
38:d6:2a:50:32:42:28:27:da:b2:c7:c0:4a:1e:44:30:49:82:
24:aa:79:62:75:7a:6a:9e:69:c2:7e:00:36:72:32:96:ef:e4:
77:5f:29:0f:28:0e:3a:5b:7e:2f:e9:af:86:2e:b0:5a:57:4a:
d9:30:3d:77:e0:a4:ad:6c:07:c5:60:54:94:ed:4f:b1:03:ec:
7d:bc:fc:2e:0d:50:51:c5:55:6b:aa:82:7b:37:cb:f1:b5:1d:
00:d9:4f:a0:09:9e:c1:e9:59:8f:cf:65:12:c0:f1:f9:40:ec:
3b:8b:1d:e3:76:54:8e:f1:6b:fc:d4:ba:39:a8:00:2e:78:d7:
4c:df:0a:04:2c:fd:3d:95:f7:11:63:6b:37:e1:df:ca:3c:93:
f8:9d:e8:37:58:7e:7e:57:37:97:4f:3b:1f:bf:2c:bf:4a:04:
b1:d7:05:f6:56:cf:e4:a1:4c:43:75:2e:21:12:51:70:16:54:
00:88:d3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:44:59 2026 by rpki-client