Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
File: qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer (raw, json)
Hash identifier: OTWx978hk23bJYxBNJmv/Buq7zbyY7S9wMe6mO8W1aQ=
Subject key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 028A3C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 30 Jan 2026 14:24:16 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 9329
AS: 17904
AS: 45489
AS: 131173
AS: 138984
IP: 103.87.124.0/22
IP: 112.134.0.0/15
IP: 119.235.4.0 -- 119.235.10.255
IP: 119.235.12.0/24
IP: 124.43.0.0/16
IP: 203.81.99.0 -- 203.81.102.255
IP: 203.94.64.0/18
IP: 203.96.160.0/22
IP: 203.115.0.0/18
IP: 218.100.61.0/24
IP: 220.247.192.0/18
IP: 222.165.128.0/18
IP: 2001:de9::/48
IP: 2001:df4:1b00::/48
IP: 2402:d000::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 12:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166460 (0x28a3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 30 14:24:16 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91E7363, serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:ca:f6:36:bf:02:fb:13:23:a3:30:b1:4c:
97:37:93:84:56:56:55:83:d3:c5:59:4e:d6:73:17:
00:9a:8b:79:f7:ea:ec:0b:10:ec:18:33:41:62:64:
2c:2c:81:f9:72:cd:03:1e:74:19:a9:ea:4b:b5:cf:
56:a3:0e:bb:00:11:55:2b:dd:d7:5f:38:9c:a6:5f:
33:b2:c3:20:e6:ab:8c:0d:1b:6d:18:6a:6d:93:a5:
b5:ff:c4:f7:fe:e4:81:29:3a:ff:29:ee:d8:7a:5a:
d1:e1:54:60:93:84:7d:2d:56:40:84:2c:7c:4d:ed:
0b:bd:53:a4:88:dc:76:28:c2:74:39:61:b2:5f:30:
ef:5e:de:f1:40:e6:a6:de:24:fe:3d:85:05:58:c9:
2b:35:de:99:99:f0:86:90:d9:2c:47:59:0d:59:3e:
14:86:fe:b1:b2:ac:ff:7b:44:20:f5:47:85:bc:2f:
2d:61:bb:d4:89:2e:df:24:38:76:e2:87:3c:7f:b9:
2c:92:34:29:ea:19:39:14:e0:46:d5:e4:8f:29:c5:
8b:60:db:93:52:50:66:8e:cf:78:99:9b:3e:4c:6f:
30:5c:11:98:be:59:f5:26:4a:26:0e:1a:e1:f6:78:
c2:80:b2:5b:c0:3c:ec:d1:80:8e:54:ad:41:be:0f:
4c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9329
17904
45489
131173
138984
sbgp-ipAddrBlock: critical
IPv4:
103.87.124.0/22
112.134.0.0/15
119.235.4.0-119.235.10.255
119.235.12.0/24
124.43.0.0/16
203.81.99.0-203.81.102.255
203.94.64.0/18
203.96.160.0/22
203.115.0.0/18
218.100.61.0/24
220.247.192.0/18
222.165.128.0/18
IPv6:
2001:de9::/48
2001:df4:1b00::/48
2402:d000::/32
Signature Algorithm: sha256WithRSAEncryption
6b:f1:52:ee:85:bd:17:fe:a1:9c:5e:53:66:5f:8e:43:9e:9d:
b4:5f:b9:77:fd:9e:55:e7:57:50:a1:7e:16:53:45:62:2e:8b:
9d:58:d9:88:b9:ce:f4:e5:da:7c:fb:3c:14:6b:6a:61:c2:a5:
45:f8:55:5d:5f:5f:f9:d0:a5:e5:62:21:1d:cd:90:10:04:aa:
3b:56:1f:17:5e:fa:2d:a8:0b:77:5e:02:fc:73:f1:45:c6:0d:
b7:da:ca:1b:76:40:73:d8:95:bd:8b:31:6f:5a:69:6e:b4:a6:
e5:e7:cd:46:0e:d3:19:a1:6f:b3:46:c8:02:74:a0:05:95:b5:
ad:1d:fb:16:95:98:be:83:40:48:d7:35:02:7a:9e:71:50:85:
b6:10:c5:2c:1e:e5:34:36:96:98:fa:07:c1:88:c3:27:1e:19:
27:42:47:20:ca:91:ad:24:74:3f:70:02:83:0b:44:68:cc:f8:
06:84:c4:53:bc:f7:89:23:f6:5b:17:60:a5:b6:e5:13:9a:2c:
7c:eb:58:22:fa:cd:2c:26:cb:10:eb:e4:47:b6:9e:5f:8d:8e:
40:c8:c2:72:b5:4f:00:9a:4e:b7:a4:23:8a:c5:17:07:c7:7f:
36:07:3c:6f:ba:d1:43:ad:19:f0:f5:15:89:61:dc:30:75:f9:
47:c9:26:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:04:34 2026 by rpki-client