Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
File: rzCJXc48ZcI77FTLCJhY66Fhic4.cer (raw, json)
Hash identifier: QnuTllzYFrXsG0AiGFoCrDZNgIvIJrE3l8Tij3Tzmkk=
Subject key identifier: AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D47B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 08 Sep 2026 02:44:33 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 24011
AS: 139744
AS: 139748
IP: 103.144.125.0/24
IP: 202.0.124.0/23
IP: 202.14.107.0/24
IP: 202.20.48.0/20
IP: 202.36.149.0/24
IP: 202.37.26.0/24
IP: 2001:df1:c280::/48
IP: 2001:df4:b380::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185467 (0x2d47b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 8 02:44:33 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91CA294, serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b8:b8:a0:b0:68:f2:08:0a:0b:29:6d:3f:bc:
46:fc:f9:e7:e3:ef:f5:dd:6f:fc:f5:62:47:a0:4b:
f3:f5:f4:a2:3f:3a:1e:62:5b:a4:86:0c:81:4e:1a:
91:32:ce:03:f0:b8:a0:fb:27:84:c6:10:19:46:f2:
7b:62:3f:0e:46:48:b9:57:77:a7:5e:46:58:10:58:
83:c1:8a:38:b1:5d:5b:fa:09:17:2e:d1:18:bc:eb:
2c:1e:ef:cb:60:30:cf:dd:d9:ef:19:b9:4e:0f:31:
0b:5d:9a:75:16:19:57:2c:b1:cc:d8:6b:2f:63:64:
a3:ee:a2:cc:b4:3c:07:2d:0a:16:e8:76:6e:f2:7c:
b1:1a:83:1a:72:b7:a5:ef:df:e3:c6:b8:85:a9:ea:
db:8b:41:d5:db:6e:61:fe:a4:9c:d0:67:0a:72:62:
0d:24:4e:86:f9:06:06:56:31:f7:20:5f:d5:81:70:
d1:9f:87:18:3e:e6:cc:33:8c:90:08:5c:83:91:c3:
4d:4b:83:aa:21:a3:78:5d:60:c1:ed:92:cd:4c:c3:
e4:7d:9a:5f:a2:b6:67:ee:74:33:eb:1e:41:9d:f6:
93:21:17:ec:f8:64:ef:80:3e:0c:8c:ad:8a:b5:3a:
b4:05:f6:f4:3d:ae:4e:28:e4:1f:90:34:01:61:e9:
50:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24011
139744
139748
sbgp-ipAddrBlock: critical
IPv4:
103.144.125.0/24
202.0.124.0/23
202.14.107.0/24
202.20.48.0/20
202.36.149.0/24
202.37.26.0/24
IPv6:
2001:df1:c280::/48
2001:df4:b380::/48
Signature Algorithm: sha256WithRSAEncryption
04:82:b4:63:3a:9e:c0:9e:d7:25:5c:bc:2b:b9:1c:bb:68:e2:
16:e1:19:5a:81:a2:7b:0b:5a:79:15:a7:70:e0:1a:da:d5:0d:
31:17:8d:50:b3:a4:16:cd:3c:11:02:10:6e:3e:65:06:fe:16:
6d:77:80:c0:af:6a:97:fa:1e:31:fb:f8:c1:3e:c8:c0:65:83:
25:67:93:db:95:f8:ad:55:55:5b:ba:d5:97:b3:1e:cc:1b:55:
50:1f:50:eb:52:a8:06:9f:42:a1:b8:ff:fc:90:37:b3:74:a6:
3f:65:ef:0b:8b:c4:32:23:f8:bf:26:be:01:00:79:8d:aa:00:
72:85:62:25:d8:da:ba:09:05:98:a3:1f:5c:93:3e:43:1e:76:
87:ed:04:2b:a3:f8:12:31:78:2d:a2:67:91:a9:45:d4:73:df:
82:84:ce:7e:2c:74:dd:6c:ee:d8:10:40:75:b8:74:59:03:03:
76:5b:e5:15:63:bc:4a:0b:05:be:c7:78:0f:62:fd:80:99:2f:
80:19:86:49:c9:e7:85:86:6d:f2:d4:02:56:62:bf:a4:69:f4:
b2:61:bf:0b:dc:1e:90:ee:79:c3:f5:8c:75:95:8b:14:47:f7:
d1:47:fd:f0:0f:2c:36:f5:bf:2a:64:ec:19:0a:2d:78:36:4d:
ed:90:1e:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 19 10:03:29 2026 by rpki-client