Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer
File: nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer (raw, json)
Hash identifier: UxxW7E+KneoEPhjkJgEZimUN2EMlKjBsiPNYKh+BvOE=
Subject key identifier: 9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A7B0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 30 Mar 2026 20:31:20 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 138574
IP: 103.133.134.0/23
IP: 2001:df7:e480::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174000 (0x2a7b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 30 20:31:20 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9185D34, serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fb:ca:b3:aa:6d:33:07:02:15:75:6e:73:80:
be:c0:db:14:09:48:67:fe:c6:39:c8:40:05:86:f1:
82:34:23:75:71:bb:4f:32:19:81:3f:50:82:e7:a4:
45:9c:78:f6:67:d1:1d:b3:77:14:5d:4d:cc:71:7e:
ed:1f:90:c5:b1:39:a1:74:4e:5d:33:ab:2f:99:32:
c7:ad:87:5a:f5:8c:0d:5b:33:95:2e:79:67:51:26:
66:90:6c:e3:ca:59:34:6b:04:8b:f5:25:c5:13:b5:
c7:c5:08:a9:80:6a:27:f6:71:1f:4d:33:a6:29:b8:
a4:03:bd:07:ef:ca:01:3a:3e:c8:02:69:81:9e:8c:
2a:9d:33:35:ec:de:68:9b:86:05:3e:47:d7:dd:01:
d4:f0:ec:b1:5d:8a:ae:8b:e6:43:51:7d:54:b2:d8:
0d:34:72:87:e4:d9:41:24:be:0a:45:56:9e:63:ea:
cb:09:74:4b:05:12:5c:5b:c1:99:3f:41:d1:b2:ac:
8c:cf:01:40:e9:b5:bb:9f:f0:9a:ba:62:55:09:9a:
ec:c7:b0:14:69:32:56:db:de:e0:71:64:1c:9e:50:
84:18:f4:1a:88:a3:f6:55:a8:57:4e:54:94:68:9a:
95:67:4c:b2:9a:50:72:ab:b9:4e:c9:ee:f9:85:0b:
9f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138574
sbgp-ipAddrBlock: critical
IPv4:
103.133.134.0/23
IPv6:
2001:df7:e480::/48
Signature Algorithm: sha256WithRSAEncryption
7b:99:c2:e9:3d:bd:e3:13:f6:34:9b:cf:54:bd:81:ed:95:02:
7a:ae:40:0a:e0:e8:4a:db:63:2b:60:57:cf:51:98:df:7a:b0:
dc:29:cf:c9:0a:e6:a4:fa:28:12:16:61:28:7c:4f:05:30:2d:
dd:06:60:d3:82:f4:f1:44:c3:af:cc:e7:22:86:0b:93:cd:35:
1a:6c:ca:55:a8:31:09:a0:0b:5f:35:81:e3:28:41:e7:57:43:
a5:4b:03:26:9c:1a:44:29:d0:17:b0:2e:95:1d:6e:a9:7f:e6:
b5:24:eb:69:d9:8b:56:d1:56:a9:78:38:ba:80:dc:9c:46:3c:
ae:0f:03:fe:fc:ff:33:5f:5c:19:8a:89:0e:bd:00:ef:74:a4:
0e:07:d9:29:b6:fc:7b:1d:52:0d:10:35:ca:c7:f2:ff:b5:52:
9c:34:45:69:fc:e4:8a:a0:03:74:28:47:8f:8e:68:d8:02:a3:
5d:9e:5d:ae:be:46:8a:8e:58:47:0f:f7:54:65:27:ca:e6:c8:
6c:ce:b1:93:fb:59:19:85:79:73:c6:4e:ec:9d:85:77:13:38:
54:e7:bb:2b:3d:7c:ec:b6:90:93:14:24:20:de:ec:5c:cd:ab:
01:42:dc:49:0a:d1:9b:4a:ef:90:32:4b:35:3f:1f:b0:f6:bb:
ad:59:ed:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 6 07:10:52 2026 by rpki-client