Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer
File: o0K4Har3eauhbTK2-wuDD4ULT_A.cer (raw, json)
Hash identifier: aDjmRomf1M26EL3NmitH8e6kyp2/wt9tXPSYwNxAWGg=
Subject key identifier: A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D8D1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 28 Sep 2026 10:53:11 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 139857
IP: 103.146.68.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 13:19:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186577 (0x2d8d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 28 10:53:11 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91A1205, serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:f8:40:6a:d2:69:05:d3:af:af:fa:41:26:
38:d0:11:f0:ff:a6:b9:c6:fc:ec:ed:71:d0:dd:78:
8c:85:9b:d6:0c:e0:05:d8:65:54:29:dd:b5:92:c2:
89:af:a9:bb:cc:96:0e:d6:18:2e:8f:86:0f:c6:2e:
07:fe:a5:8c:a3:95:8f:02:ac:08:57:80:4b:14:25:
8b:4c:c0:29:ce:7b:cf:ea:82:f4:61:44:22:e6:00:
1f:aa:28:c7:17:7d:3f:28:da:05:75:a1:0f:28:fc:
20:d9:8f:2d:84:80:a6:ef:6e:b4:a3:36:4f:b6:c9:
c6:59:b9:2d:6b:bc:50:12:b4:77:65:af:cd:99:47:
d7:a1:03:32:b6:cd:a2:f8:e9:db:a5:97:57:b5:50:
d6:a6:76:8b:77:d7:6f:f8:c9:88:33:30:33:0a:8d:
3c:8b:69:23:bb:d0:88:c7:c1:73:b2:47:1d:63:3e:
15:4f:1b:13:96:41:0f:ac:9c:01:20:d8:59:5c:2f:
c3:51:49:d9:33:e7:86:53:f8:f0:6f:a2:18:a4:58:
a9:ff:81:9f:89:c5:2c:57:35:08:39:3d:43:c2:00:
24:18:c7:42:a6:68:8f:21:cc:75:93:e8:ab:72:81:
cc:bc:59:68:80:29:4e:f8:ad:40:a7:3b:72:fa:3b:
bf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139857
sbgp-ipAddrBlock: critical
IPv4:
103.146.68.0/23
Signature Algorithm: sha256WithRSAEncryption
64:ac:de:b8:b3:5f:08:98:cd:97:2b:47:98:d8:9f:3e:3b:f2:
29:ea:31:dd:84:22:c2:5a:bf:71:d9:1e:93:f8:71:3b:2d:83:
0d:44:8b:49:4f:40:61:5d:db:75:be:e0:c7:d1:0a:8d:b1:77:
fd:78:7e:fb:b3:40:8f:d9:99:24:a7:cb:b8:ca:b0:71:4e:af:
72:50:8e:f0:75:90:5b:77:4f:c8:50:45:fe:e4:93:b7:f4:af:
13:85:51:f6:62:99:b1:04:11:46:3b:7a:4c:94:d1:1d:a0:d4:
ec:94:ef:40:61:cc:0c:3a:d0:00:2a:80:9d:6d:88:20:c3:51:
f4:4e:71:d6:2a:54:c0:88:65:01:e7:26:10:28:c4:a1:c3:49:
7a:32:32:fe:25:bd:ab:5a:ae:58:e6:19:19:e9:52:11:68:d0:
00:58:17:27:23:32:6f:18:4e:53:88:29:a3:ea:03:b2:5c:f8:
3f:47:0b:70:76:52:af:84:7d:39:a8:59:79:0c:b2:dc:09:a6:
89:4e:9e:96:3d:f0:d0:38:3b:d4:08:5c:3f:67:86:2e:9a:bd:
fc:b3:33:25:25:62:54:a9:32:f1:c8:f2:f6:4b:f0:1e:f0:3b:
c9:c9:49:53:d9:ae:bf:f0:59:96:65:74:ef:b3:28:c9:4a:5f:
14:1d:ce:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 15:14:03 2026 by rpki-client