Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer
File: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer (raw, json)
Hash identifier: Sius9MGXm31PwbEFU3jgqm1T/i2X7u7XpqaY2m9bSZg=
Subject key identifier: 9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DAC8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 Oct 2026 14:24:13 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 140901
IP: 103.153.52.0/23
IP: 2001:df4:3380::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 14:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187080 (0x2dac8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 1 14:24:13 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91CB14D, serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:51:6a:bf:d9:b0:e3:70:eb:64:5b:4c:11:4d:
c5:1c:1e:68:9b:16:f6:b6:b0:69:a2:d8:0b:28:01:
7d:1d:ad:33:48:7d:46:8d:96:fa:4b:42:5e:7b:62:
a9:94:b5:46:31:cb:7e:86:01:35:87:31:1e:ea:cb:
dc:4a:cb:31:c9:7a:5f:2d:eb:09:f0:53:80:a0:04:
0f:4e:29:5b:a9:fd:d5:b6:2c:cf:39:29:63:e6:b5:
29:e8:17:21:d9:e1:2f:12:fc:68:cf:72:8e:a9:53:
de:2c:a4:0b:47:47:0c:96:68:e0:7f:8a:fb:c7:10:
95:ca:34:24:e5:3f:49:cd:ea:a8:9c:29:c7:62:18:
14:c2:af:39:52:a5:5a:da:cf:58:52:c6:28:36:69:
92:1a:ce:e1:34:fe:22:d3:55:a5:f1:41:a1:02:f2:
9e:71:48:8b:6e:0d:a0:99:06:55:35:7b:89:07:ec:
ac:2a:29:26:94:86:60:7d:29:6b:6c:c8:81:50:27:
2d:24:f9:35:2b:6b:70:62:6e:44:ab:1f:4c:c9:34:
e3:2a:80:5a:ea:55:ce:3a:8c:5b:fe:83:17:f3:2d:
87:48:90:5c:de:4f:b5:f6:fa:e5:a9:44:13:7d:ed:
ed:13:76:86:c8:c7:c0:80:aa:08:7a:2e:53:dc:8a:
c8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140901
sbgp-ipAddrBlock: critical
IPv4:
103.153.52.0/23
IPv6:
2001:df4:3380::/48
Signature Algorithm: sha256WithRSAEncryption
2f:23:ec:81:03:24:4d:fc:4b:bb:5f:14:63:15:8b:8e:67:3e:
a5:91:d0:7f:ac:3a:13:00:81:24:dd:87:96:50:b8:f8:ee:24:
de:96:0c:25:04:ad:10:23:46:3a:24:b5:a9:4f:3d:41:c0:3b:
e3:f3:d5:1a:8d:f3:20:35:29:1e:a8:66:5a:c5:fb:7f:2f:4e:
20:a7:0e:a4:f0:82:8f:dd:27:18:d5:7a:2c:9b:e5:fb:07:bb:
c2:3f:6c:78:b5:2b:90:e7:d7:bc:f9:f7:32:14:99:6c:52:4d:
13:f4:13:4c:84:78:2b:c7:17:46:03:b5:97:1d:78:57:d5:40:
d0:30:0d:4f:2c:2e:49:63:35:cb:f7:1a:fe:aa:52:43:88:09:
d2:1a:fc:bb:b9:06:ef:27:bb:fa:c8:80:bb:32:a2:ec:92:93:
0a:be:b5:1a:a6:3c:a6:ca:ff:e2:4e:9f:17:77:3d:5e:84:4f:
fc:9c:e1:f8:01:3c:67:64:f6:12:37:01:87:ea:38:e6:fe:74:
54:97:65:03:35:e2:20:7a:4b:87:f8:96:5b:bc:89:c9:8c:95:
15:0f:ea:d0:bb:b0:c5:8a:e1:09:4d:6f:b1:f2:f3:1e:9c:b5:
25:e5:0d:0c:1c:bb:b1:30:9d:df:d2:e5:d7:00:28:69:5f:e2:
4e:f9:e9:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:16:16 2026 by rpki-client