Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
File: dtwBlmJpqGSLEcQlQCgDWjafFew.cer (raw, json)
Hash identifier: 3Ov6SmvfpVh7FDi/cixbnHzK01mkyMQiGSYUSwVRZWo=
Subject key identifier: 76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BE8A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 21 Jun 2026 05:56:17 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 131265
IP: 45.249.218.0/23
IP: 103.219.238.0/23
IP: 103.225.104.0/23
IP: 202.4.180.0/24
IP: 202.74.53.0 -- 202.74.54.255
IP: 202.125.106.0/24
IP: 2001:df0:8600::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 19:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179850 (0x2be8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 21 05:56:17 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A919E4A9, serialNumber=76DC01966269A8648B11C4254028035A369F15EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:52:cf:7d:1e:a2:f7:7c:bb:9d:1a:16:43:
de:1a:b4:e5:11:6b:be:e9:af:f3:da:91:11:05:41:
73:30:4c:77:14:e7:37:98:d4:b7:ed:81:9c:0e:04:
ad:af:a7:10:24:7d:fb:fe:35:5e:87:98:17:f0:52:
96:78:fd:a3:f1:a0:f1:57:1d:bb:a7:d2:2e:75:ae:
3f:d0:ad:ab:15:dd:2f:0e:54:c7:47:1c:6b:c2:0c:
fc:50:1f:e4:81:b7:ab:ed:fa:60:64:a5:3b:1e:48:
f7:aa:4d:f6:61:6c:90:ed:d2:39:06:ff:1a:1a:35:
a0:13:a1:4c:80:e5:64:57:a3:5c:19:6a:a6:8a:e0:
54:60:3f:e3:80:19:5a:6a:cb:fa:37:b6:bc:60:57:
69:2d:c2:6b:a1:b5:8c:1d:17:fb:3b:d1:4b:53:20:
a7:71:7d:ed:59:86:10:20:72:76:bf:99:67:ce:c7:
32:32:d0:cd:e9:41:37:ee:8b:d4:48:e4:dc:b2:64:
0c:5d:1a:1f:eb:1c:2e:12:2e:c9:e7:a5:c6:7b:9d:
3f:0b:a5:38:be:69:1b:15:9b:0e:70:28:e4:78:ce:
d7:8d:30:8f:90:15:b1:14:6d:1c:ae:71:7c:30:b9:
dd:ff:ea:e0:26:e9:27:e0:c9:7a:5b:71:29:b0:bb:
84:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131265
sbgp-ipAddrBlock: critical
IPv4:
45.249.218.0/23
103.219.238.0/23
103.225.104.0/23
202.4.180.0/24
202.74.53.0-202.74.54.255
202.125.106.0/24
IPv6:
2001:df0:8600::/48
Signature Algorithm: sha256WithRSAEncryption
42:60:3e:49:10:48:24:98:4c:51:d5:55:13:d9:1e:2d:6d:9a:
31:34:c3:82:c9:91:b6:1e:4d:59:b6:2d:b5:7d:f0:2a:fb:34:
43:05:70:92:fa:f2:73:16:63:a4:89:04:83:6d:27:c5:ba:81:
73:a8:11:a7:a4:ef:c9:bb:c8:75:aa:9a:27:04:c5:83:a0:61:
1f:84:b3:ad:19:3c:da:98:a5:7a:33:c2:74:02:6f:eb:65:4d:
95:5d:61:e5:c8:1c:86:ec:ca:cb:30:5e:89:e6:c1:85:89:41:
71:e0:d4:0b:aa:a3:8d:32:79:f7:e0:17:17:94:27:1c:2d:56:
79:54:7a:e7:7b:0b:71:3e:00:7d:f8:06:31:b7:3c:5c:90:59:
3e:3f:9a:e0:6a:12:a7:34:20:ea:da:79:93:d7:f6:04:1a:c2:
58:61:0a:74:ce:e4:e0:e3:d7:dc:64:dc:b4:00:05:51:85:a3:
fd:09:cd:ec:83:2a:e2:9f:4a:78:75:ed:6a:da:93:32:b4:d1:
2a:9c:c7:15:1e:b0:8f:76:fe:92:b7:93:72:f9:bd:30:a7:9f:
d7:8c:b0:84:e8:c3:1e:11:ad:4e:60:01:6d:ff:ad:7c:12:ba:
58:58:33:b8:47:a7:5f:71:cb:6e:b0:1a:69:3d:5d:31:7a:e9:
2c:2b:58:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:46 2026 by rpki-client