Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aOkXw1nR1G-x79ULcydnbeApSt8.cer
File: aOkXw1nR1G-x79ULcydnbeApSt8.cer (raw, json)
Hash identifier: yAQW8QFazC51yuLG2RSOtouPQYwC7ljGP+GbGuQB/Rw=
Subject key identifier: 68:E9:17:C3:59:D1:D4:6F:B1:EF:D5:0B:73:27:67:6D:E0:29:4A:DF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D72D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/aOkXw1nR1G-x79ULcydnbeApSt8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 20 Sep 2026 23:32:28 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 140611
IP: 103.150.254.0/23
IP: 2001:df3:9980::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 15:11:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186157 (0x2d72d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 20 23:32:28 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91A2F6C, serialNumber=68E917C359D1D46FB1EFD50B7327676DE0294ADF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:27:d0:5b:65:42:9c:9d:50:ba:3d:1e:f1:
9f:0b:4a:14:2b:84:cc:19:34:61:f1:03:6e:7b:c0:
8c:55:16:69:a3:e8:c1:fa:f6:d0:bd:df:da:9c:a2:
a4:75:1c:94:5a:30:05:8f:8f:ed:50:4f:c2:1f:63:
de:49:d8:8b:91:e9:e6:5b:50:5a:68:98:0d:14:7b:
5d:18:c5:b7:61:24:c7:27:47:bd:9a:9b:04:a5:8f:
46:73:f1:b1:57:51:39:b8:26:55:fc:02:6a:a8:7b:
90:e5:b6:83:34:e1:d9:a4:f3:09:28:b7:ce:78:d8:
6a:5a:b9:6e:b2:79:1c:7c:35:2a:b0:e8:d2:7c:8b:
58:08:12:09:e9:e5:19:8f:4f:d5:47:1b:4d:15:04:
2f:5a:9a:69:04:40:9e:fc:89:3c:b7:41:8e:7a:0a:
c4:b0:18:6c:c2:8d:44:86:68:b6:68:b5:f1:e0:08:
05:84:ce:29:ac:c7:05:8f:62:9a:9b:83:61:c6:6b:
63:3e:72:0d:75:b5:3a:32:f4:0a:cf:b6:c0:cc:7b:
77:9b:8f:8a:84:46:18:b2:b9:51:15:32:87:28:8a:
33:30:2f:d7:a2:c1:28:a5:20:37:d8:f1:22:a5:4d:
7c:cb:8f:04:df:86:31:fd:dd:77:87:0b:32:7b:52:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E9:17:C3:59:D1:D4:6F:B1:EF:D5:0B:73:27:67:6D:E0:29:4A:DF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/aOkXw1nR1G-x79ULcydnbeApSt8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140611
sbgp-ipAddrBlock: critical
IPv4:
103.150.254.0/23
IPv6:
2001:df3:9980::/48
Signature Algorithm: sha256WithRSAEncryption
0d:3a:d6:56:13:f5:ae:1b:7e:ed:e3:33:ca:73:b6:cf:26:c5:
69:1d:0d:2e:b8:0b:06:18:22:ee:0e:f8:96:4e:43:c0:f2:df:
e9:34:34:0d:ad:a6:83:2b:00:62:e3:42:f9:7c:9d:07:14:0c:
a1:2d:bd:cf:26:4f:c7:b6:f4:08:cb:07:d5:65:46:15:8b:01:
87:4e:72:01:09:5e:16:84:de:13:d3:ac:5f:de:6d:21:fe:3b:
ea:f1:df:c7:0f:2e:4a:da:35:d1:ad:42:53:bf:23:7d:4a:d0:
ab:fb:86:44:da:4f:9e:7d:60:2c:e8:1a:57:36:86:cc:db:57:
69:fb:3f:79:7c:57:ff:2e:47:d1:43:2c:97:f2:79:c8:a2:38:
99:df:66:79:49:8f:41:75:47:bc:ec:dc:cf:ae:41:02:8d:09:
aa:71:5d:09:2b:c8:17:38:c8:aa:60:64:77:40:a1:d9:19:15:
1c:a2:3b:19:a1:9e:d5:39:3e:0e:96:a0:3f:a6:5c:24:3c:c5:
a2:4b:c5:f2:31:77:eb:a2:f7:08:fb:32:21:c5:c0:c5:87:90:
d9:f0:b0:ac:ca:4f:4d:8e:06:1e:47:d7:0d:eb:d4:1e:99:6f:
64:b2:17:19:f3:cf:c0:21:c9:46:c2:62:75:7d:9a:18:6e:12:
41:84:9a:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Oct 2 00:51:44 2026 by rpki-client