Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer
File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer (raw, json)
Hash identifier: j5ZTlHAKcFzZtqbP1hAKrhR60NmySKSuAZX7VsJrOhE=
Subject key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AD30
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 17 Apr 2026 13:00:16 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 141748
AS: 142548
IP: 103.163.120.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175408 (0x2ad30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 17 13:00:16 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:50:33:54:08:db:0c:86:b3:72:23:6e:a9:
9f:20:d6:4c:3e:c3:e7:14:28:80:42:a8:21:d3:44:
6b:39:42:fc:d5:43:48:cc:8e:b2:8d:e3:00:a5:d2:
1a:91:6d:d0:42:0a:4e:84:3b:91:d0:94:6d:b0:69:
76:19:02:eb:1d:3a:9e:da:5c:51:a0:a9:07:bd:cd:
82:ce:50:f0:bb:d3:d2:94:6d:21:9f:b0:21:08:0c:
7b:ce:8e:b0:0e:c0:61:b7:2f:40:7f:f5:d3:63:86:
a3:10:8e:7f:c7:0a:3b:1a:48:4e:04:b7:41:d7:f7:
be:c7:0a:a5:44:ce:fd:fa:a9:ed:71:39:3d:6f:74:
ea:23:3a:cb:16:89:dc:18:03:bf:ab:a3:96:95:0a:
c0:b8:99:b4:d1:cb:d4:37:0f:b8:8d:be:55:24:51:
99:42:cc:0e:db:5a:19:3b:79:fb:fd:2f:0c:e3:2e:
7a:6f:5c:5f:29:09:37:6d:e3:67:bf:ac:2c:08:22:
f6:5d:fd:a7:46:1c:a9:72:2b:4a:fd:4b:9c:4e:1b:
5e:d9:1a:df:57:e2:7f:a1:44:32:10:64:ae:1a:ad:
a9:df:a9:1f:83:02:f4:9b:04:0d:25:37:a6:b5:8a:
d9:d5:d8:64:dc:0e:7f:15:a0:a3:d2:b3:a6:af:ee:
ff:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141748
142548
sbgp-ipAddrBlock: critical
IPv4:
103.163.120.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:8a:c4:3d:86:35:36:ac:1f:5a:7c:7f:1d:61:76:11:24:17:
8e:27:98:06:aa:3f:fe:d9:f4:99:13:26:61:08:9e:01:89:dc:
ee:2f:14:49:c0:fe:92:47:18:73:fc:d0:24:0c:a1:9f:e1:c1:
45:ee:15:93:55:36:17:19:f4:12:5d:b3:90:3a:7a:34:da:bf:
fe:56:5d:aa:4a:57:0d:6b:7b:d8:51:f1:0e:1a:d9:36:8a:d3:
97:ae:99:c2:4e:f6:33:c0:ba:a1:73:f2:11:81:0b:bd:1f:12:
b4:5e:40:a0:c4:b3:d6:ab:46:88:83:28:0f:43:0e:fe:e9:cd:
81:70:f7:ee:a6:e7:28:61:68:26:d5:a4:ed:ae:6a:cd:5b:76:
4a:11:0c:81:a7:7c:af:22:1b:b2:48:b2:52:b8:d8:df:cc:98:
56:d7:d4:77:17:3e:04:d3:b8:ec:a0:9d:d0:c4:4d:f5:33:49:
19:3f:d9:50:81:ab:43:4f:e4:c3:f7:79:5c:f4:56:93:be:69:
b3:21:0c:fc:d7:38:95:4d:35:24:45:de:ad:c1:ef:35:bc:af:
cc:f2:22:c3:39:07:b8:c8:f2:45:a7:2a:a2:b4:eb:62:ed:ac:
4e:e3:5c:67:24:a9:20:ce:f8:28:f6:5a:a7:68:2d:4d:ad:f2:
82:d8:2a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 14:07:55 2026 by rpki-client