Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
File: X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer (raw, json)
Hash identifier: 8uU9/Xw6wKOACIX8O7FxaJHuuS8Q0MkoB7Yvwrbd3CM=
Subject key identifier: 5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A236
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Mar 2026 10:46:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 135332
IP: 103.214.98.0/24
IP: 2001:df1:9a00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Mar 2026 14:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172598 (0x2a236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 4 10:46:14 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91878FF, serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:38:ba:9f:74:ce:e8:4c:3e:8a:3c:ad:ff:
ca:56:f5:b9:90:68:03:e7:d3:1c:9e:0b:09:8a:19:
98:94:6b:5c:d5:7f:8d:4a:57:fd:51:6b:95:26:9f:
99:03:51:f7:27:d3:47:92:c8:28:e0:ab:1c:24:91:
83:11:d4:73:03:2b:77:68:30:82:c7:ea:6d:5a:d6:
ea:c2:32:36:78:ce:26:0b:7b:ec:57:43:bb:c1:b9:
ce:ed:64:ce:05:e6:4e:f4:1c:2d:b3:ca:10:f2:2b:
4b:ad:dc:3d:68:43:bc:bf:8d:8b:03:04:fa:58:da:
e8:df:de:8e:79:b4:2e:db:b3:19:b8:1e:db:c6:e0:
c4:d3:c8:9a:0e:e8:89:68:8b:6d:bd:db:bd:c9:30:
6d:3f:82:65:13:dd:81:5f:8b:ea:2c:c5:c3:f7:3c:
0f:86:76:88:0e:4c:6d:9e:91:18:05:9b:5f:42:c5:
57:80:79:e7:4f:9a:6e:cb:cf:3d:4f:36:2a:a2:2e:
ea:e6:f3:b3:a3:6b:e8:2a:56:94:fd:d9:bd:80:51:
50:fb:05:40:33:35:9b:b7:7c:80:11:df:df:d0:f6:
a3:60:0a:24:4f:97:11:68:df:53:dd:00:b0:93:2a:
b3:42:f2:7f:25:b5:29:94:96:3c:7e:79:e0:0a:80:
e9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135332
sbgp-ipAddrBlock: critical
IPv4:
103.214.98.0/24
IPv6:
2001:df1:9a00::/48
Signature Algorithm: sha256WithRSAEncryption
58:70:c3:7e:cd:c2:34:a5:04:33:9b:b1:d5:4f:12:a0:e4:67:
22:58:d6:a4:d0:fd:b6:ee:08:c4:88:e0:d4:ee:cb:e9:3f:1f:
f2:d4:30:bf:65:77:dc:e2:2f:9e:ac:0f:aa:68:68:e5:25:19:
11:a0:20:2e:92:3f:e3:ae:70:89:37:86:2d:6f:66:38:95:e9:
52:1c:be:68:60:79:ad:f6:dc:2b:d4:7e:47:ad:da:8e:21:9d:
b7:29:9d:d9:14:fe:9d:0d:05:3a:bc:da:5b:22:4a:c5:fd:f2:
15:25:a9:72:66:2d:ba:04:11:e2:b0:e0:d2:47:13:bc:75:95:
cd:76:5f:f2:49:39:36:33:c4:52:7a:53:7a:71:2a:0d:95:8c:
37:81:d0:9e:f9:28:67:df:77:a5:13:8d:fa:82:04:ea:f3:8c:
99:cc:cf:cf:6b:24:70:48:03:8f:c5:35:63:ca:d2:0e:07:aa:
26:fa:94:d5:90:ec:22:12:c3:06:ed:e6:a4:ea:32:8f:9f:f0:
5d:0c:c2:d7:3b:e1:5f:53:c6:ba:66:91:51:cc:1b:38:73:f6:
3a:bb:da:74:95:05:fd:8d:74:8a:db:a5:e4:a3:56:41:2e:32:
e8:72:cf:0a:91:35:5a:f0:ce:27:e3:a3:28:2b:44:12:b7:64:
c4:6c:ec:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 4 16:01:40 2026 by rpki-client