Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
File: k9FqxcizBHYOd0g_k-6vq8OjCxI.cer (raw, json)
Hash identifier: A9+pLq6N2eIspZpNOI57IacoiGq5oK0kwOrgzHdMzZo=
Subject key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A1E8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Mar 2026 12:30:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 56192
IP: 103.255.128.0/22
IP: 202.0.110.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 07:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172520 (0x2a1e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 3 12:30:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:46:a4:ea:b3:28:15:94:c7:57:f6:04:39:40:
4e:83:9c:8c:6a:ca:5a:8e:1a:cf:40:99:af:4b:e7:
03:e6:8a:c4:57:ff:c7:fd:86:b4:76:32:55:ed:9a:
8a:bd:b8:af:c0:f3:02:50:3c:da:31:6d:12:82:fc:
3c:15:93:f8:5e:4b:ea:6a:03:f0:fc:0b:8c:f4:12:
c2:31:aa:34:78:88:47:68:23:a0:7e:71:3a:db:34:
b6:f2:0f:dd:9f:69:75:1e:e7:3e:d0:4d:66:c1:fe:
31:a5:23:48:49:6a:6c:91:bc:12:08:18:03:2d:6c:
de:0e:04:4c:b2:70:dc:e3:31:19:34:ab:2c:86:32:
84:90:e9:0b:01:c2:b0:7e:c8:ec:7d:e8:31:bd:a8:
0c:b2:02:86:47:6a:0e:43:76:8e:36:c6:9f:33:c2:
cb:d1:78:42:bf:2b:65:d2:63:e4:37:a1:0d:4b:ac:
ae:ad:7e:d0:8e:cc:93:a6:1b:47:37:05:15:48:2a:
65:c5:28:07:0e:db:10:fa:b6:a4:28:39:c5:e5:eb:
ba:1c:9e:45:3c:d8:c7:2a:42:60:36:8e:46:f6:a6:
18:65:25:e3:3a:99:2b:e2:1d:5f:2a:32:c1:5c:13:
50:3b:cc:e2:06:91:9f:89:cd:99:74:7f:01:61:71:
3a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56192
sbgp-ipAddrBlock: critical
IPv4:
103.255.128.0/22
202.0.110.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:81:41:4e:79:15:f5:7f:24:cc:73:45:c1:e5:12:d2:15:b4:
01:21:f7:5b:f3:20:0d:ce:63:d7:6c:25:c1:81:8a:f9:31:44:
33:97:bc:ae:3c:e6:71:3a:98:d4:0a:5e:bd:f8:8a:50:41:9e:
2e:52:e8:f8:91:b3:73:50:a5:23:53:77:4e:4d:2a:34:e8:83:
b2:52:ab:dd:2e:c7:41:51:12:15:29:97:5c:de:97:d7:12:95:
73:d8:36:6f:d9:15:a5:f8:ee:a1:59:2b:fa:a6:d1:06:94:d8:
a0:91:d4:f3:59:fb:94:88:94:db:c7:e9:b2:1d:70:f8:00:08:
2a:cc:77:64:4c:77:df:dd:38:42:31:1a:47:f1:5a:19:37:7a:
2c:ef:cf:86:70:19:3c:07:c4:ec:e4:9c:5e:8e:4b:da:34:b7:
26:14:fc:fe:49:a2:34:a4:56:ed:9b:31:7e:aa:27:b6:3d:62:
3c:f8:29:00:a3:34:35:2b:d8:97:bd:7d:52:8d:ca:c7:cb:46:
53:05:eb:d4:3b:1c:f6:b4:35:49:65:be:fa:c4:78:51:b7:fa:
01:14:32:be:22:8d:66:4a:ec:c7:39:65:4f:18:77:1c:85:29:
f9:2e:6e:8f:2e:a1:59:ff:9b:d5:9c:40:02:72:0a:11:67:fc:
cf:05:c7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:00:18 2026 by rpki-client