Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8LkhP6x7Hk14PDzjxkYxjlRiIM.cer
File: q8LkhP6x7Hk14PDzjxkYxjlRiIM.cer (raw, json)
Hash identifier: oV7xlzUvUCSgeITx8RXID1o1gI/qqlKWLOFIZ5+LXb0=
Subject key identifier: AB:C2:E4:84:FE:B1:EC:79:35:E0:F0:F3:8F:19:18:C6:39:51:88:83
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D398
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 03 Sep 2026 08:55:05 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 134600
IP: 103.121.32.0/24
IP: 2001:df6:3100::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 18:08:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185240 (0x2d398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 3 08:55:05 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91EAF29, serialNumber=ABC2E484FEB1EC7935E0F0F38F1918C639518883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:46:4a:48:3b:3c:a9:f2:f8:2e:bc:ec:85:
0b:01:dd:25:81:98:a6:a3:e0:40:af:59:1a:b6:c6:
c0:4a:1d:11:5f:a9:88:e3:57:74:db:09:49:fb:c7:
14:f6:6c:61:77:9d:06:34:9a:32:ae:3d:54:f3:88:
2b:b4:c0:6e:41:3f:3b:68:28:0b:54:87:44:44:50:
11:6b:5b:d7:d1:0b:bb:44:98:39:8d:d6:1a:2e:f7:
33:a6:97:b8:68:38:c8:7c:e6:07:4e:d2:5f:84:c6:
1b:74:8f:ce:55:a5:9c:71:de:b0:e9:f1:d1:ee:14:
32:cc:50:08:2a:3f:ff:2c:fa:58:2a:a7:c6:5b:b9:
a7:ee:66:2b:32:3d:cb:54:70:cb:46:1d:dc:4a:2d:
78:e0:93:59:1a:8e:bc:85:f9:2c:4a:be:1f:f1:a7:
30:a5:7b:38:79:a4:d1:f6:29:30:24:d5:2d:03:a4:
f4:eb:65:a3:66:47:20:0d:2b:7f:25:76:c3:a0:b3:
e1:82:55:d6:da:ed:8b:e9:51:2d:1d:33:6f:0a:e2:
93:b0:84:5e:6a:fb:fe:ac:5c:d5:af:2b:db:00:f2:
cb:53:3d:ce:55:a8:0e:19:e1:29:53:d3:40:d1:3b:
65:3f:2f:e1:82:9d:e0:a9:c5:2a:bd:de:e0:2c:a8:
cc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C2:E4:84:FE:B1:EC:79:35:E0:F0:F3:8F:19:18:C6:39:51:88:83
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134600
sbgp-ipAddrBlock: critical
IPv4:
103.121.32.0/24
IPv6:
2001:df6:3100::/48
Signature Algorithm: sha256WithRSAEncryption
b1:39:2c:ad:32:f0:80:b3:d9:12:5e:7f:89:9f:0c:0a:9a:d4:
e6:d0:30:03:1f:71:7c:7a:a7:1a:99:2c:76:f1:a6:b1:e4:ec:
64:33:b3:9f:15:23:5a:22:81:92:17:b9:f2:e4:7a:0e:36:17:
9d:cc:28:7f:cd:86:f0:53:ac:78:cf:f1:01:1b:e6:fd:a3:af:
df:84:89:67:ff:35:15:c4:5e:69:23:4f:39:89:0d:e5:e2:2c:
6c:61:20:c7:cb:f3:62:bd:8a:20:2c:fd:6e:70:5e:3e:44:f9:
cb:ec:53:ae:6b:79:bf:5a:b9:6e:32:f2:65:fe:f1:7c:1d:8b:
21:72:b8:2e:36:74:7f:a6:41:94:cb:b9:a4:fe:22:4d:b1:72:
a9:1a:81:59:14:b3:c0:5e:29:c1:7e:2f:c5:c3:e5:0d:81:f6:
45:66:9d:db:de:e5:01:74:29:67:ee:8e:f4:25:ab:08:e9:29:
17:11:8e:11:40:69:19:42:71:0e:79:54:59:a3:23:75:92:46:
b0:d7:60:96:b0:80:ac:07:b4:67:c2:c8:ee:9d:8a:11:ef:eb:
94:75:ac:ba:fc:63:b6:5d:76:41:75:b3:95:52:1c:b5:34:30:
6c:0f:6a:8b:73:d9:0b:fe:19:10:3a:60:44:6f:65:96:1a:f2:
d9:de:fe:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 14 23:03:05 2026 by rpki-client