Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer
File: rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer (raw, json)
Hash identifier: mTpzRkH9meW34jDCJaBoWJkfEsVkfmgVeojnw/xdEs0=
Subject key identifier: AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A1E4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Mar 2026 12:12:12 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 133411
IP: 103.227.164.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 13:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172516 (0x2a1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 3 12:12:12 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91C9FA5, serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:80:92:68:9f:3f:41:ab:9c:cb:d8:2e:54:b5:
d3:c0:c5:66:c8:1a:c5:43:4a:e0:e0:a4:bd:71:50:
da:b7:a0:16:d1:fa:56:cd:c9:51:9a:ff:4d:ff:d3:
8b:74:2c:76:5c:0f:f6:af:94:6b:f3:3b:4e:4f:ac:
ff:db:b2:7b:fa:6f:f8:47:41:3a:8b:8e:2d:c1:f9:
84:d5:09:c4:e4:1f:e1:23:dc:6b:93:1e:5b:c6:d6:
ca:83:a2:a0:62:be:a8:c2:1b:8a:c4:9a:86:a1:03:
e0:db:f9:49:4a:15:1f:66:f0:a0:88:ec:90:b3:9b:
cb:0f:fc:5a:a5:e5:d2:7a:05:b2:a2:81:d1:35:ea:
05:2f:d6:1d:f6:e4:c0:71:27:a7:94:2e:21:2a:5d:
d3:d6:8a:d5:2a:f6:48:26:12:86:89:56:13:91:78:
43:c2:65:12:f8:d3:1b:61:91:cb:db:73:69:cc:e7:
48:bb:c9:b8:97:b3:9d:ae:c6:4c:e3:d1:fe:a9:55:
17:fb:ba:4d:aa:70:b2:89:00:c9:b9:fd:1a:e8:45:
e6:7f:54:35:c0:28:23:91:71:bb:f2:01:78:34:87:
e0:64:ef:a7:c9:41:c5:a6:a2:dd:29:8c:28:42:7a:
09:53:ac:14:5d:28:d1:03:50:c3:ea:f0:23:35:de:
2f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133411
sbgp-ipAddrBlock: critical
IPv4:
103.227.164.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:f6:09:2f:4a:11:0b:7f:cc:ce:71:b1:84:ed:0f:8f:29:70:
76:c7:58:18:13:01:9d:46:e5:25:e5:73:ce:28:33:d2:4e:c1:
47:5c:47:76:05:4a:0e:23:74:7c:ac:06:35:c7:74:56:16:2b:
b8:b1:5f:1d:97:05:57:32:c2:5d:7d:af:47:ce:7f:e5:b5:bd:
f0:51:c5:41:00:f3:e0:1c:9f:c7:90:06:b4:21:5c:bf:14:b4:
8d:2e:a7:d0:9e:54:1f:18:ad:f3:b3:62:b6:3f:a3:e7:67:67:
4f:4a:76:e2:0c:7a:a7:1e:c4:b4:12:71:66:4c:77:d8:8b:f6:
09:2a:fb:04:24:97:e8:20:2d:a1:0a:6f:fb:c1:d4:07:45:0b:
e2:19:2a:84:00:d1:3c:a4:af:2a:8a:c1:38:d7:24:76:21:41:
25:43:25:46:9c:2d:cf:16:45:e8:94:0f:b1:75:24:b1:07:c9:
97:9a:b7:10:76:2a:00:f0:86:61:01:0b:d7:0b:3a:fd:72:39:
8f:15:2a:92:95:0d:43:a0:e5:77:5e:43:a4:87:6b:26:96:fc:
d4:cd:9e:d4:6a:26:a0:1c:64:cc:d0:98:fb:b1:7f:af:dd:99:
c4:e6:ed:25:ab:bc:de:ce:83:91:98:a9:ef:d5:a3:88:36:98:
f0:6e:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 15:47:21 2026 by rpki-client