Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
File: vK5XMu8hlzK0msgoTbGBTpLIaxE.cer (raw, json)
Hash identifier: tJFy8AKRdPEf5/BlEbb2stqZ17v8TY2Xz9qTPBXiROY=
Subject key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C0D4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:23:24 +0000
Certificate not after: Fri 30 Oct 2026 00:00:00 +0000
Subordinate resources: IP: 103.150.161.0/24
IP: 103.161.77.0/24
IP: 2001:df3:7f80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 17:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180436 (0x2c0d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 30 14:23:24 2026 GMT
Not After : Oct 30 00:00:00 2026 GMT
Subject: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:dd:b8:91:19:d1:3e:a0:48:7a:49:45:c4:
b8:29:4b:a7:8f:65:8e:b4:9d:40:5c:64:35:a5:75:
6a:40:c4:95:bd:67:bc:8d:38:8c:c9:6c:eb:73:16:
99:8c:7b:58:fa:ec:79:f7:3b:3d:af:b3:af:a5:c5:
f7:50:b1:c4:1c:65:dd:00:13:a0:94:50:c1:50:36:
ce:90:91:37:3d:cf:03:ce:1c:45:40:c0:dd:c4:c0:
1d:2c:d7:e0:eb:d3:2f:eb:d6:16:a2:06:e1:a2:0b:
9e:af:fc:00:62:c7:51:ac:41:3a:1e:a9:55:49:5c:
dc:4c:32:a0:15:03:18:d2:79:fa:87:c8:a1:ea:3a:
3c:83:0e:cf:ce:fa:d7:f0:6e:0b:8f:3a:6e:b5:a1:
bf:d3:53:6f:6c:40:8f:de:32:fd:42:93:59:02:f8:
65:a7:59:aa:c6:0e:a2:36:5f:8e:b5:9f:ec:ec:be:
84:6e:4d:5a:c3:75:7a:e3:7b:0a:c4:a7:92:9a:02:
c8:72:63:05:69:70:9c:6e:45:3c:b2:cb:f0:0c:f3:
87:65:a0:fc:8a:0a:0f:32:b7:1b:f7:24:63:c5:60:
a5:35:b4:8f:d2:02:9f:ba:6b:16:98:f8:b5:cd:c9:
c3:68:ef:7e:ae:27:4b:45:e0:e6:4a:31:29:3b:36:
62:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.161.0/24
103.161.77.0/24
IPv6:
2001:df3:7f80::/48
Signature Algorithm: sha256WithRSAEncryption
43:3f:4c:b6:d1:84:db:e7:54:95:a3:5d:01:e9:f0:7d:08:d6:
19:41:2d:db:51:25:5e:4a:fc:50:33:03:89:30:b3:c7:2f:80:
c8:83:81:5d:ac:5c:41:9b:5a:2b:51:34:00:89:30:b5:72:63:
ef:d6:5e:f4:1e:0e:0e:56:a1:fe:f6:ce:18:59:5e:ad:ea:9c:
6c:c8:1e:2c:49:85:45:30:b7:f0:9a:ca:3e:7d:40:25:a7:b0:
45:26:0d:75:9f:6d:51:56:9c:db:40:61:7d:49:3b:67:ed:f8:
7d:c3:28:c2:9f:1b:82:4a:68:81:70:a9:68:2a:29:2f:35:45:
05:91:36:24:56:e1:85:82:3d:1f:f6:27:65:cc:fc:4f:01:2a:
82:54:c5:0c:6d:3e:95:88:b8:75:2d:9b:00:f0:5b:bd:da:bd:
c1:c6:9f:47:37:48:9c:23:5e:44:2b:13:54:20:17:c1:ec:92:
81:e4:6b:3b:48:58:b2:fa:13:3e:68:05:b5:4e:39:0d:f9:5f:
a6:a5:9f:ba:22:2a:49:da:55:71:7d:09:80:14:7e:70:31:ac:
68:e7:28:99:35:a2:ca:73:27:ea:6e:bd:74:06:9f:f3:6f:40:
32:52:15:e1:e4:a9:78:e5:1b:e3:c7:33:79:c9:6a:4d:46:90:
f3:bd:09:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:22:44 2026 by rpki-client