Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer
File: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer (raw, json)
Hash identifier: uXqh3ntDdAFJI+43G8cpOcwoMclpBzW27Rnzjry0VPM=
Subject key identifier: A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CDA2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 16 Aug 2026 13:56:08 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 140981
IP: 103.154.48.0/23
IP: 2001:df4:6880::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 10:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183714 (0x2cda2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 16 13:56:08 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91D1E4C, serialNumber=A59D836E1C31623CC586448AA752B746853B841D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:b7:b7:9a:b1:87:fc:8f:75:f7:db:0d:a0:
f8:c6:d4:84:3d:0b:49:b8:3d:05:c1:7b:50:a6:fd:
d4:17:f8:f8:0b:dd:f7:b2:8e:48:60:5f:1e:2a:42:
50:bd:a7:8a:0e:10:ad:5a:e7:b6:1e:88:78:60:52:
2e:48:10:fc:f5:17:f0:6e:ca:3f:31:19:0e:c0:48:
b8:c1:90:36:99:de:a7:cf:f8:08:ad:af:9d:06:b4:
56:dd:01:72:8c:53:38:9c:5a:99:be:99:ea:89:5b:
a3:78:7f:bf:82:48:1a:47:af:f9:1b:28:31:e3:be:
cc:0c:a5:97:0f:2b:4d:af:0f:3e:28:e4:69:2c:14:
36:f6:8b:05:b9:6e:f0:95:e0:17:7b:47:38:e9:54:
14:0a:51:36:12:04:f7:06:8e:77:04:13:01:05:4d:
16:68:6b:4f:dd:e0:74:03:81:9e:75:b8:70:e9:fd:
a9:84:a6:f2:c3:a6:2f:e1:69:04:cc:16:fd:83:f3:
38:06:2e:58:b3:d1:ce:ae:6f:2f:01:c7:25:19:bb:
b8:18:83:2e:01:a9:6a:2d:07:fd:20:a5:e2:b8:ea:
92:f4:32:21:fa:29:f2:18:c6:68:fe:ec:90:10:21:
7e:ab:00:a6:a8:86:71:4c:d1:1e:3f:ea:71:ed:f7:
a7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140981
sbgp-ipAddrBlock: critical
IPv4:
103.154.48.0/23
IPv6:
2001:df4:6880::/48
Signature Algorithm: sha256WithRSAEncryption
17:f5:ef:88:56:cf:42:16:a0:86:c5:49:e9:c7:e7:01:1f:f8:
ea:8e:23:6b:b7:e2:cf:5e:1b:d0:8f:73:53:6a:71:37:b3:b3:
aa:7e:af:9b:d6:2a:e6:c4:3a:a2:dd:2d:60:84:1a:f5:43:ac:
9d:a6:8e:24:0a:72:d3:fb:41:46:a7:8c:14:f1:2b:3a:b4:d0:
c6:ed:35:9c:84:84:bb:99:00:f0:b2:46:5a:59:ae:64:eb:49:
0f:72:64:27:1f:1d:52:3d:ae:8c:01:de:66:01:bf:18:c3:37:
6b:3e:99:9b:1e:7b:cc:64:b0:36:bb:57:d5:f0:15:7f:f5:8b:
99:17:19:7c:61:bb:ab:82:c8:06:15:c2:4d:6d:15:8c:3a:5e:
45:52:51:cf:df:f8:7f:df:00:58:59:e2:93:f5:06:09:36:2c:
38:cd:4f:1e:b0:20:e7:c4:45:7b:c0:c2:df:92:50:08:99:23:
16:c2:1b:9c:67:16:40:d2:0a:da:f9:62:87:df:84:78:fc:72:
98:14:37:0b:7d:4c:c1:ae:08:d3:5b:fa:a0:d3:2e:df:61:eb:
3d:ef:4c:e4:b7:ff:d1:3d:6f:18:8a:af:3d:d2:aa:48:ce:25:
32:70:56:ff:06:6b:a8:52:b2:28:cb:b9:f8:b7:bc:02:fe:b6:
ac:46:6d:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:36 2026 by rpki-client