Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
File: kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer (raw, json)
Hash identifier: +FSiAbYdoMz8Xu0HNk2VI1WyTnkETI0BZFV0WsPL3Jg=
Subject key identifier: 91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B7E1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 29 May 2026 10:44:28 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 24373
AS: 138527
AS: 139259
IP: 103.127.248.0/22
IP: 2404:2b40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178145 (0x2b7e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 29 10:44:28 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91C4FB5, serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:34:f4:12:5e:1a:75:9f:42:01:1b:17:9d:ef:
2f:59:fd:31:8a:50:12:44:45:16:b3:8d:93:05:7f:
90:40:ab:8a:0e:4c:90:b6:6a:a6:4e:62:91:dc:09:
ac:f9:eb:61:b1:f7:36:4d:da:c1:f2:f3:ee:ec:bc:
1e:90:04:26:ae:ef:14:fc:23:86:60:c3:57:7e:28:
c1:c0:4f:e1:22:4e:b0:da:1e:1b:bf:e9:eb:6a:ee:
1f:c9:69:24:43:54:57:91:d8:5a:4d:bb:bb:ef:82:
92:be:9c:1a:d4:06:ed:73:2a:26:ba:47:ba:cb:a0:
88:31:8c:ce:98:44:7c:9a:a0:c8:08:d5:97:b6:01:
88:80:42:0f:3c:59:c1:0d:28:5d:e5:cd:dc:af:12:
24:79:dd:b3:e7:25:37:87:46:d0:db:be:1e:36:93:
c5:8c:74:fc:0a:72:e8:d6:e8:41:8a:a2:70:c5:3d:
92:b7:a0:52:88:77:d8:72:62:f0:3a:11:57:e8:8f:
f6:1e:e5:25:d4:15:80:52:7e:f3:b9:88:5b:99:31:
17:39:07:4e:67:d8:aa:92:db:16:9c:4e:5d:2d:c4:
77:f3:8a:f4:de:6f:b2:06:34:ed:32:a7:ab:69:36:
2e:36:fe:e8:4e:95:69:cb:44:d5:21:e2:47:21:d9:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24373
138527
139259
sbgp-ipAddrBlock: critical
IPv4:
103.127.248.0/22
IPv6:
2404:2b40::/32
Signature Algorithm: sha256WithRSAEncryption
1b:53:32:6a:b3:42:9b:d6:d1:23:c4:48:04:53:fb:e5:fd:2a:
52:7e:56:7a:bf:5b:89:37:a2:49:29:3d:a3:36:e1:f0:f1:6f:
42:8e:63:51:ba:e4:ea:49:f3:81:a3:3c:dd:dc:ab:b5:22:4e:
3a:9f:13:0f:c0:c7:cd:49:da:fc:c8:cc:c5:9a:57:33:36:fb:
eb:bb:33:5c:5c:c5:62:2e:c1:ad:d1:be:9e:62:db:d9:fe:a5:
24:26:5e:51:6b:9b:d9:9d:23:aa:40:e2:4f:58:75:5b:79:77:
1a:fa:79:f1:0b:68:1f:8f:89:13:07:ce:e9:a9:17:26:ee:f3:
37:b0:8a:80:4c:67:cd:3c:38:41:49:fc:88:71:40:08:17:71:
33:4d:fd:de:1c:11:41:c6:ea:42:36:60:9d:34:a8:c8:b3:b7:
05:4b:e7:e4:8d:16:6e:88:80:ad:06:93:0b:30:37:3a:82:85:
3e:2b:77:a7:b8:3c:bb:73:2a:23:d0:dd:bb:97:7a:a6:e0:22:
4f:67:2d:b4:b7:3c:cf:4a:ed:dc:a0:4a:09:ac:49:66:f1:43:
c5:62:56:f9:07:45:9a:e3:90:c0:02:56:a2:6c:b3:24:99:72:
3f:e9:42:be:a3:5b:ff:d1:45:68:37:c2:6e:66:d0:14:4c:f6:
c1:3c:dc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:55:55 2026 by rpki-client