
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer
File: bRdadMGgmL-i337kNxYF_2owQkk.cer (raw, json)
Hash identifier: W/No/BuPKKXH4EwQ3gqrVCoeMfpNz+yWElj9BpK9vUo=
Subject key identifier: 6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CA20
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 01 Aug 2026 15:21:04 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 45472
AS: 56079
AS: 139663 -- 139664
IP: 103.22.196.0/22
IP: 115.31.88.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182816 (0x2ca20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 1 15:21:04 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91F6CB0, serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5f:0a:a3:ba:0d:1d:19:29:3e:05:e2:ab:df:
dc:9a:87:87:18:10:e6:49:4a:b5:ac:53:ec:85:7e:
c2:a7:94:e4:b0:1e:af:26:b0:ea:60:24:80:02:99:
cf:85:53:db:51:82:a0:1e:b3:b7:04:d9:97:6b:8c:
8f:37:ef:39:a6:68:01:97:7e:d5:0a:33:de:f9:ce:
04:76:d3:68:e9:1a:0c:83:97:07:14:8e:27:74:78:
44:f2:c3:6e:49:41:49:be:89:29:c2:a8:f1:b4:fd:
86:74:69:1f:b4:4f:64:e5:65:50:66:ae:69:75:b5:
4a:53:62:d0:7b:e1:d3:6a:c5:8c:9f:5f:6a:1f:af:
12:c6:65:4d:05:a0:1a:64:36:0c:ec:2b:ba:68:69:
da:ec:15:b0:45:6d:fe:b1:44:52:31:49:16:88:17:
7c:e3:e1:cb:63:dd:20:27:f7:d4:92:c6:58:a5:95:
0f:38:d5:14:21:94:a0:d2:e9:b8:1b:a8:41:1d:6d:
ce:e8:ce:83:cd:11:93:e4:54:a9:ca:7e:8f:3e:2d:
b7:cf:9e:85:1f:8e:2b:e0:e0:63:5f:1c:25:bf:13:
d0:7d:93:79:0e:5e:1b:73:ab:93:fa:cf:1e:99:3f:
0b:7e:77:bf:c0:f6:77:1f:22:4d:26:e1:c5:51:0e:
06:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45472
56079
139663-139664
sbgp-ipAddrBlock: critical
IPv4:
103.22.196.0/22
115.31.88.0/21
Signature Algorithm: sha256WithRSAEncryption
af:87:c0:8c:8a:0a:f1:e0:97:42:60:66:10:56:ee:2e:cc:63:
e1:0b:65:fd:c7:07:30:83:f4:8b:39:34:c9:cd:73:52:a8:97:
0d:54:e0:92:ab:04:b3:c6:48:c0:1e:ac:df:f2:d1:ae:12:be:
b7:b0:a6:7a:07:3d:16:96:46:61:6e:4a:0c:1f:86:a0:22:ec:
e8:ad:c2:db:00:6e:d1:9d:ae:a7:c0:4e:0e:9d:73:5e:48:4d:
85:c7:67:c3:94:77:5e:c8:b4:1c:e5:ce:78:e0:82:8f:92:e8:
62:05:e7:c2:86:14:6e:92:7d:b9:12:5a:3c:79:7a:14:5a:80:
b6:3d:f6:54:73:5d:bb:49:18:fa:cb:c7:db:2f:7e:93:05:be:
9a:9f:d3:cf:15:d9:2a:4d:1a:91:05:1d:b5:17:6e:ee:45:37:
62:39:d9:a7:e6:3a:2a:65:16:08:a3:51:64:74:b1:07:44:d6:
99:d2:e8:9a:5b:83:26:01:4b:9b:e8:0a:ed:9f:51:68:c4:a2:
4f:9f:38:10:2c:04:41:17:a5:0d:84:7c:12:9d:94:08:c4:6b:
18:7f:fc:da:78:df:4d:3b:90:a8:8b:bb:55:93:d0:0d:60:cb:
b1:67:12:c5:2f:85:ca:a3:6d:0e:0b:fe:30:ba:5d:66:70:a6:
cc:09:71:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 10:45:45 2026 by rpki-client