Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb6mqjOAZskOtcsyQAxq52BciKQ.cer
File: Yb6mqjOAZskOtcsyQAxq52BciKQ.cer (raw, json)
Hash identifier: X750gNTWjODB0OaTaAqdIPosmPDisE48Zk/bGh0hpz8=
Subject key identifier: 61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B381
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 08 May 2026 14:49:38 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 138972
IP: 103.137.244.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 05:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177025 (0x2b381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 8 14:49:38 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91FA52B, serialNumber=61BEA6AA338066C90EB5CB32400C6AE7605C88A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8d:49:0c:a1:28:a4:bb:ea:55:2c:3e:ea:7f:
ea:4f:0a:4e:1c:af:53:73:18:44:f4:4d:12:f3:1d:
2a:c7:97:9e:90:83:4f:a2:97:53:4c:f9:2c:67:00:
f5:cb:88:9d:41:df:6c:89:ca:3e:a5:d9:98:fe:d9:
ab:fb:82:11:f2:df:c3:7a:45:a1:21:13:4c:4c:b1:
11:f9:3b:60:c7:87:d1:84:7f:8b:2e:e9:1e:e7:5e:
87:c3:01:64:64:4c:61:f4:6f:ae:a6:28:50:5a:b9:
63:4e:55:19:35:f1:42:52:a1:29:15:2e:6d:76:e1:
46:af:7c:d5:43:2e:ad:ef:6e:bb:11:f8:1c:93:49:
6b:4d:d5:87:0b:27:c4:3b:9b:0f:77:07:be:52:f6:
8f:29:68:b2:e2:9d:68:6d:e5:e5:13:ec:cf:10:a7:
09:e7:fb:b6:8a:ba:0b:af:eb:77:b2:8f:7a:9e:a5:
ad:eb:87:2c:48:95:92:74:ba:bd:34:64:de:c1:9d:
b1:13:0f:f9:7c:c2:7c:fd:93:23:eb:12:85:b6:e0:
de:6d:91:46:c8:91:2e:24:03:ab:3e:a5:7a:f7:85:
82:96:72:fb:44:69:cf:7a:c8:8c:b8:98:91:0f:0b:
37:87:7a:47:30:50:2c:6a:b4:40:82:19:03:a9:69:
a5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BE:A6:AA:33:80:66:C9:0E:B5:CB:32:40:0C:6A:E7:60:5C:88:A4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FA52B/28CBFB145C3211E9AB624580C4F9AE02/Yb6mqjOAZskOtcsyQAxq52BciKQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138972
sbgp-ipAddrBlock: critical
IPv4:
103.137.244.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d4:14:68:92:25:2b:f2:da:a3:be:93:81:88:93:49:38:1a:
0f:8a:78:8b:88:e0:98:ed:56:b4:32:4a:07:7b:e0:cd:7f:fe:
d4:60:87:60:f9:09:59:b8:c5:f3:ab:6b:e0:db:c2:35:6f:c0:
06:40:64:1e:0b:c5:e7:08:57:dc:ff:f1:af:c4:aa:07:1a:db:
dc:88:9e:42:c4:08:8f:91:a8:83:de:f7:12:f3:13:c7:40:b2:
b7:df:a4:d3:8c:41:26:be:bf:0e:c2:6c:c7:40:ca:91:6e:42:
fb:92:79:4f:3f:6a:7c:3f:02:71:be:41:13:4d:4c:2e:18:ce:
0f:4b:29:ee:c5:40:9c:59:78:7d:e7:52:36:96:90:7c:c9:98:
30:4a:ec:40:e3:a2:9a:a2:f5:fa:93:c4:85:c9:34:d5:4b:a3:
d8:1c:77:68:75:09:8a:0e:d5:57:f2:27:ed:8c:63:91:a7:79:
9f:37:da:a3:50:57:f0:b5:5c:bb:25:76:42:8c:60:96:9e:ef:
ae:ae:ee:ba:69:a6:ea:e9:75:50:b3:03:d8:ef:5c:4c:81:6a:
e5:82:28:cb:7c:d5:59:d4:b1:7c:d4:b6:22:38:9c:2a:bf:ad:
bb:56:f7:3a:1c:d5:43:78:2b:40:f5:49:ba:ad:25:ed:f3:b6:
e5:17:9e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 07:55:29 2026 by rpki-client