Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer
File: WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer (raw, json)
Hash identifier: J7CH6wI8B7wUSdApX17A90oemi2BVfsJzVq7TlQCYQg=
Subject key identifier: 5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C544
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 15 Jul 2026 15:01:01 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 149857
IP: 103.189.4.0/23
IP: 2400:83e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181572 (0x2c544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 15 15:01:01 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91E3B1D, serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:d0:ba:27:94:b5:76:07:46:54:38:04:7d:
09:bf:91:23:c9:44:ca:d3:b9:aa:0a:49:9c:d3:90:
bc:aa:2c:d3:a1:10:75:07:ab:fc:df:43:6c:00:b6:
29:05:0e:0d:f5:20:cb:ed:f3:99:b2:29:da:d4:9a:
40:1d:aa:76:ea:92:ee:83:7f:da:0d:a3:d2:97:1e:
6f:3f:1d:0b:31:f0:c1:c3:4b:4b:da:b8:12:b3:eb:
6b:9c:ec:ca:e5:8a:a9:72:f0:3a:a1:7a:e9:16:cc:
f5:3b:ca:64:ea:d6:17:93:c9:44:37:1f:63:97:ad:
63:50:ef:35:ca:a7:92:15:a0:08:61:c3:57:ef:3b:
52:fc:ec:bf:03:d3:23:ce:da:be:ea:43:3f:65:bc:
a9:b4:5f:f6:83:64:6d:2e:c7:37:d5:ed:36:20:12:
00:ca:8e:cf:90:56:13:03:44:ec:f4:4a:78:a2:62:
97:7c:ab:cd:d7:9a:52:d2:46:d0:7c:cb:a5:4e:13:
2a:89:e7:be:8a:d3:f5:04:7d:52:49:12:a7:ed:9e:
93:ee:40:c0:c8:1b:da:06:ec:5c:83:7f:b2:27:20:
99:2a:ac:b9:36:4f:f6:6a:26:78:d9:a3:56:30:93:
e6:8e:ad:29:87:de:6e:c0:1d:12:4f:c1:9b:b1:e8:
4c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149857
sbgp-ipAddrBlock: critical
IPv4:
103.189.4.0/23
IPv6:
2400:83e0::/32
Signature Algorithm: sha256WithRSAEncryption
07:76:b6:bb:b1:43:49:2d:21:5a:88:82:74:61:10:be:67:0b:
f7:06:cc:03:cb:52:9c:f9:56:f8:58:21:49:94:bb:45:d2:d1:
6b:b4:cf:1b:68:f9:5e:8f:be:46:d4:3e:6c:79:28:9a:af:05:
d7:25:c9:ce:0e:e3:ff:d6:cc:8b:ec:a1:04:fb:51:1c:4f:96:
14:da:33:21:b7:29:2b:98:d1:2d:98:11:8e:8f:92:97:24:80:
88:d1:6f:99:97:e6:47:ba:69:b1:d5:1c:96:d5:97:54:c6:c9:
31:8d:02:6c:40:46:6d:db:6f:ce:5c:9f:91:d2:36:9a:ce:e9:
ef:51:bf:d9:73:cd:70:43:db:82:76:ca:bc:51:40:9f:48:f0:
e1:92:56:5e:9b:bd:19:fd:73:52:74:9a:2f:f9:6e:ed:d2:fd:
2e:e2:52:5d:e6:b8:97:75:78:eb:13:2e:a3:e1:14:0e:a2:59:
64:26:b5:01:7d:87:24:7a:74:3e:ec:ce:7d:d3:29:17:99:64:
b8:24:80:a3:b5:2a:8e:39:97:b3:57:d8:85:07:af:26:c9:80:
e5:e7:bc:d4:ac:44:99:77:69:ee:95:eb:8d:b1:e9:63:39:9a:
c0:73:08:db:cb:9a:98:44:fb:a9:59:2a:01:1c:3a:bb:d2:bf:
b8:99:12:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 10:45:38 2026 by rpki-client