Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLCoplSBz0wlAPm3SpG0Rkxybx8.cer
File: cLCoplSBz0wlAPm3SpG0Rkxybx8.cer (raw, json)
Hash identifier: geR3VdvLma1276DcMUuoMl3P+DzYhFawnNtix5ATBaE=
Subject key identifier: 70:B0:A8:A6:54:81:CF:4C:25:00:F9:B7:4A:91:B4:46:4C:72:6F:1F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02E5C5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
CRL Distribution Point: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Manifest: rsync://rpki.apnic.net/member_repository/A91DD7A0/E92C4980DBF111F18FC6710B0D66CEF9/cLCoplSBz0wlAPm3SpG0Rkxybx8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DD7A0/E92C4980DBF111F18FC6710B0D66CEF9/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 09 Nov 2026 03:59:11 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 45226
AS: 132162
AS: 133146
AS: 134807
IP: 45.115.48.0/24
IP: 103.6.116.0/24
IP: 103.54.238.0/23
IP: 103.55.32.0/24
IP: 103.196.194.0/24
IP: 103.199.96.0/24
IP: 103.252.190.0/24
IP: 203.0.2.0/23
IP: 2001:df0:29a::/48
IP: 2402:4380::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 17:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189893 (0x2e5c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 9 03:59:11 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91DD7A0, serialNumber=70B0A8A65481CF4C2500F9B74A91B4464C726F1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:be:86:1c:9b:0f:56:e0:e7:3a:d3:4a:97:8e:
2d:27:c3:79:3b:8c:dc:5e:b7:5c:4b:87:d4:57:fd:
a0:6a:35:1a:74:8f:8a:66:2b:e0:03:2b:c3:57:76:
3c:13:22:85:4a:3e:4a:d9:36:02:f5:8b:a6:5f:32:
0f:4d:7b:87:fd:a8:a7:70:cd:5c:42:df:aa:bf:6f:
19:ee:f6:85:b0:55:81:61:bc:a1:43:b4:7a:42:01:
a0:3a:56:a1:88:06:d6:c3:f7:7b:17:63:b2:37:54:
ce:00:2d:59:0e:ea:f0:43:ea:fa:9f:b3:d3:63:e2:
29:35:71:e9:0b:f0:27:b7:88:f3:5c:4e:bb:c3:9b:
96:66:fd:56:80:29:15:3d:c4:c5:74:fe:13:66:8f:
ab:7e:75:46:52:ba:53:17:32:32:4a:f0:20:47:65:
7b:2c:d3:97:5a:a1:b6:f1:cf:0b:41:a8:2e:f3:1b:
1c:30:51:b3:86:d4:cd:bf:a4:44:40:6d:e3:b0:0b:
76:12:c5:e6:cd:03:ef:64:38:13:f9:a5:34:36:52:
c9:ab:0f:51:d6:b1:e8:a7:56:e7:37:17:b7:16:2d:
b3:6c:a3:a8:17:3a:b2:fb:a0:4c:74:85:ec:26:c7:
0c:1b:36:30:61:29:d1:ee:ed:d0:ca:83:41:9b:08:
f8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B0:A8:A6:54:81:CF:4C:25:00:F9:B7:4A:91:B4:46:4C:72:6F:1F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DD7A0/E92C4980DBF111F18FC6710B0D66CEF9/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DD7A0/E92C4980DBF111F18FC6710B0D66CEF9/cLCoplSBz0wlAPm3SpG0Rkxybx8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45226
132162
133146
134807
sbgp-ipAddrBlock: critical
IPv4:
45.115.48.0/24
103.6.116.0/24
103.54.238.0/23
103.55.32.0/24
103.196.194.0/24
103.199.96.0/24
103.252.190.0/24
203.0.2.0/23
IPv6:
2001:df0:29a::/48
2402:4380::/32
Signature Algorithm: sha256WithRSAEncryption
96:63:e5:a5:82:1f:9c:fd:14:4e:87:bf:dc:e1:e5:b6:dd:6a:
0c:84:d5:72:65:da:0c:91:72:50:0c:db:b3:03:20:fd:5d:e1:
00:30:8d:8b:95:f5:e1:e8:45:9e:32:3d:7e:61:db:74:65:57:
10:2c:2e:b0:93:c1:73:1e:96:d5:42:e2:d2:bc:88:5a:37:25:
71:63:0e:b3:84:66:ee:ec:ff:ae:4b:13:f2:04:3b:12:47:84:
34:8b:d2:82:7a:65:c5:b1:d0:63:cc:f4:3a:d4:99:67:6f:31:
66:7a:27:64:b8:ac:67:92:99:48:dd:9c:74:a7:1a:ad:20:d0:
ac:e9:e1:5a:95:1c:20:78:20:89:8c:a4:97:fe:fd:95:d4:07:
15:4b:a4:2f:5d:d1:97:5b:ef:ac:6d:bd:1f:50:f3:80:a5:ec:
ed:85:1b:eb:59:29:29:a8:1a:1a:e4:e1:17:cf:22:c1:2b:88:
b6:2f:89:74:5a:1b:17:46:5f:49:c3:16:18:7d:9f:0a:92:c1:
dc:67:c0:3f:6a:c0:d0:96:2b:d0:8b:84:d0:0f:44:61:f5:70:
db:83:49:5d:ae:24:19:c9:0b:fc:04:b1:c9:98:0c:da:6e:88:
50:27:81:d9:e4:df:48:b9:bc:c6:32:62:47:e5:1e:aa:08:fe:
5c:4d:2b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:15:47 2026 by rpki-client