Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer
File: jX1Dtvy5Zujhplg72gclAVesMQ8.cer (raw, json)
Hash identifier: lhmThc25yZisB8YHA1JtlUxf48dlbb44aVp2/NVifSE=
Subject key identifier: 8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D9BC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 30 Sep 2026 14:13:11 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 17906
AS: 23915
IP: 203.11.224.0/19
IP: 203.22.32.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186812 (0x2d9bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 30 14:13:11 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91D6444, serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:47:3f:39:11:a8:7c:93:e3:e5:9f:4a:5c:
c1:be:f2:12:54:89:49:dd:2e:3d:18:2d:9c:7d:68:
ca:4b:05:1f:53:8c:16:7a:a3:0d:3b:73:9b:fd:07:
35:46:3b:5e:89:a4:00:a5:0f:6e:23:39:c7:e9:fc:
b4:65:0d:ac:49:12:b4:a5:40:9d:fc:e0:e0:45:1d:
20:87:c3:69:8e:63:a2:43:e4:97:5b:b4:d8:12:c4:
b3:38:09:7d:c2:9c:cb:46:0f:83:1f:a8:a9:a7:a9:
8a:e2:8d:bf:2f:b2:12:0b:d9:82:b5:a0:27:0f:ac:
cc:92:37:3d:92:92:7b:30:61:9c:2a:27:1c:2e:40:
0c:bb:3d:b8:46:aa:a8:7b:81:42:68:20:65:9f:c9:
77:15:09:e4:e0:40:4d:2d:50:39:ba:5f:c7:bc:58:
82:f2:c9:14:03:46:a3:33:a3:63:2f:b5:a3:7c:35:
ca:d2:68:3c:72:d1:72:f0:5b:f6:66:82:b0:75:7b:
fd:57:d9:b5:f5:34:42:3d:e5:c0:5e:88:78:66:18:
75:bc:b8:b8:7e:9b:0f:f4:68:c9:f9:37:de:b4:2b:
f6:ba:74:f4:00:b0:a6:7b:54:da:9a:15:a1:41:dc:
74:95:f1:6d:ff:ee:53:49:a9:71:b6:a0:9b:65:28:
74:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17906
23915
sbgp-ipAddrBlock: critical
IPv4:
203.11.224.0/19
203.22.32.0/19
Signature Algorithm: sha256WithRSAEncryption
c8:04:bd:dd:95:92:d3:0b:ea:fc:f7:11:7d:ca:bf:07:e8:af:
97:01:fa:1a:6e:09:ef:e6:27:4f:ed:3c:9a:b8:b5:40:39:42:
47:81:7e:33:42:e9:d3:d6:34:c1:6e:3a:0b:5d:4e:66:c5:48:
04:f1:62:5c:3d:6a:6b:6f:5d:4c:59:87:02:69:4e:46:f3:38:
39:4d:23:dc:5d:6f:a2:44:dd:e7:6c:3f:7e:af:20:a5:8c:d3:
b6:e7:fd:2a:d8:28:09:fd:10:57:68:39:99:41:c8:29:ef:aa:
de:55:e5:17:c9:d6:e0:8a:b0:e0:0f:71:6c:c9:2e:49:be:74:
c2:09:9c:9d:8b:bc:59:d8:04:5f:77:7c:98:8d:f8:4e:78:7c:
d6:15:89:22:0c:ec:86:58:aa:1d:f9:97:64:ad:0b:3b:e1:ac:
56:db:06:49:d3:df:0f:03:9b:8e:d6:1f:a6:82:24:ac:ac:63:
34:55:6c:7d:55:b7:bf:2c:e3:8e:1f:62:15:e9:9f:ae:75:a3:
92:6e:dc:fb:b6:97:80:3e:fc:1b:cc:9f:ba:fa:dc:f7:5e:86:
34:04:2a:2d:1e:2c:f5:9f:4b:de:66:f6:55:c0:b3:e9:b1:44:
62:dd:5d:4b:cb:45:fb:6a:03:62:12:81:79:4d:8e:9c:12:e7:
f6:97:98:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:50:31 2026 by rpki-client