Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
File: x-37dX9ZS98jrdcSH12-PSWuAPw.cer (raw, json)
Hash identifier: 0scKh+JTUUDNJPxYVHISW2wC4dTfekwtDLdVRw06rGY=
Subject key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CC0D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 08 Aug 2026 14:04:00 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 137523
IP: 103.97.176.0/22
IP: 103.148.244.0/23
IP: 103.158.36.0/23
IP: 103.242.12.0/22
IP: 2401:89c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Sep 2026 01:36:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183309 (0x2cc0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 8 14:04:00 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b1:16:9e:85:87:8d:64:47:69:ca:24:f6:78:
34:79:51:9a:16:30:68:08:65:c0:7a:60:2b:68:61:
50:a2:a6:0d:81:a6:94:f7:06:16:a6:89:71:27:d4:
6c:26:eb:28:92:d4:60:db:96:81:33:12:32:64:85:
fa:05:25:39:4d:0f:3e:76:5f:0a:fa:3e:8d:d4:8c:
fa:af:2b:f8:66:40:6b:d4:c9:e8:ef:82:b4:6b:96:
31:c9:8b:d0:7b:b8:06:8a:0f:b6:ba:74:69:f2:f4:
91:fc:40:b9:fa:57:f8:53:6c:42:27:c5:2d:db:92:
db:16:da:e3:4e:aa:60:c7:08:00:db:e2:e4:8e:87:
6b:69:bf:e0:78:77:00:70:bd:ee:f1:b5:eb:c2:3e:
9e:37:51:bd:46:60:9e:37:bd:b1:10:c7:2f:d9:7d:
ac:2d:79:c5:61:8b:85:00:8a:8d:55:12:a1:bd:13:
cf:7e:6a:bf:16:f3:6f:ab:67:d3:ee:21:c8:e5:83:
f6:0b:1e:d9:6f:59:3d:24:85:03:0e:a0:0c:12:c5:
cc:c0:e6:fb:ed:33:04:ba:81:f5:b1:f3:15:d1:54:
ec:7c:b3:79:65:15:82:c2:2b:37:06:80:13:4d:4f:
4f:6b:3f:a0:a3:01:5e:ab:40:6d:4f:e7:1c:a7:ae:
24:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137523
sbgp-ipAddrBlock: critical
IPv4:
103.97.176.0/22
103.148.244.0/23
103.158.36.0/23
103.242.12.0/22
IPv6:
2401:89c0::/32
Signature Algorithm: sha256WithRSAEncryption
b3:88:75:ae:c5:3b:7e:46:dd:43:a8:1f:48:cf:fd:56:9f:3b:
cd:07:38:70:90:0b:f8:51:a4:d9:35:b1:8a:0e:4e:23:64:60:
36:28:46:09:e4:0b:55:00:1c:0e:42:a2:1a:8a:f0:b4:33:98:
44:c7:b2:d0:e4:c1:0b:60:3f:f7:bb:4f:77:80:3b:62:0c:2c:
34:93:09:4b:f4:5d:50:2c:2f:5a:61:b4:e1:bf:f6:57:62:e6:
da:fe:ee:11:8b:c7:bb:6e:4b:b4:f6:c8:5b:81:3b:7e:fd:fe:
1a:6d:fa:b0:80:ad:02:99:f4:1e:c9:58:4f:c4:2a:0f:71:cb:
54:0c:66:00:d3:0b:40:a4:09:97:59:40:3c:e3:16:9a:28:0d:
6f:fa:c6:17:1b:cf:8c:bf:be:2b:e3:ff:4d:c2:9b:b6:3e:5a:
9e:c1:6f:40:32:2d:6f:26:ca:7f:08:c9:f4:44:f5:74:10:57:
34:25:95:f2:20:e8:ef:7b:8f:0c:fd:06:dc:5d:56:20:f1:95:
13:07:92:bd:0b:30:08:f5:d3:87:46:5f:df:e9:8e:05:5f:f6:
c1:d6:eb:00:06:dd:6b:d2:77:67:44:98:6c:3d:20:42:2d:46:
27:b4:dd:e2:89:e5:1b:f5:a3:57:dc:b4:14:78:5c:cd:fc:29:
a4:bb:25:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:06:51 2026 by rpki-client