Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer
File: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer (raw, json)
Hash identifier: YqbPeQoSzoVCOJ5xToD3x2nMB9GpooaBnEI7WgX3I0Q=
Subject key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CC6D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 10 Aug 2026 14:03:10 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 132072
IP: 103.30.216.0/22
IP: 103.70.72.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Sep 2026 13:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183405 (0x2cc6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 10 14:03:10 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:ad:f6:86:c6:40:e9:6d:c4:ed:c2:df:e0:
95:19:e5:19:b4:e6:2d:c4:81:52:41:42:b0:00:ce:
40:b6:fc:47:49:5f:6f:e4:61:fa:f3:f2:ee:0d:31:
bf:c9:cf:1d:08:e6:83:6d:0f:1e:6a:14:ab:67:92:
b3:26:8c:be:f4:52:67:ec:4e:a5:96:80:99:ab:0c:
97:bf:e5:2f:dd:8b:64:8e:46:0a:d3:59:03:0d:79:
45:40:ec:46:76:b4:d4:af:5b:cd:72:15:28:67:3f:
5f:29:9f:3f:2c:fb:16:09:d6:34:a0:3f:6e:dd:5f:
32:2b:5f:67:b4:dd:35:63:35:e6:bb:9e:11:cb:cf:
d7:aa:ad:38:0c:cf:8f:ed:9f:5a:52:6b:90:e4:ff:
27:a3:5d:1a:53:3b:0e:27:f4:9f:c7:3f:76:38:bd:
f2:72:67:78:83:2e:74:de:7a:17:8d:c3:9d:9a:82:
d0:62:b3:ab:63:d2:7f:d9:a3:2c:2e:4c:97:f7:73:
54:4f:11:4a:67:df:1d:b7:9f:24:a1:f8:b3:3e:d8:
5e:c1:f8:87:3c:23:22:c7:ac:92:0a:1d:52:b7:34:
ca:63:2f:dc:38:f8:74:1e:92:19:52:a2:39:ec:f4:
9c:ed:b4:7a:c2:8b:94:4b:af:86:42:48:47:68:e1:
c4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132072
sbgp-ipAddrBlock: critical
IPv4:
103.30.216.0/22
103.70.72.0/22
Signature Algorithm: sha256WithRSAEncryption
31:70:19:03:5c:59:df:06:0a:46:94:93:03:b8:8c:b2:ba:05:
09:f1:a0:b7:ea:9e:69:ea:3b:e0:1b:89:36:24:7d:96:64:d2:
62:1f:a3:d6:c5:6d:f3:7f:0a:3f:a7:69:c7:f0:47:50:5f:be:
60:a9:89:a1:35:26:8b:51:80:9c:a6:dd:0e:2f:77:60:7e:e8:
98:e2:04:59:f8:46:19:07:3c:f0:fe:b3:8a:44:c6:a8:c2:a5:
67:b5:ba:01:67:f2:7f:a5:0a:e3:25:e8:d8:c1:39:dd:4e:0b:
b0:48:0a:4d:97:b8:6c:de:d2:e9:88:82:1a:82:b8:e5:27:31:
9c:fa:2c:b6:42:5b:b7:3b:1a:4a:89:8b:cb:6b:ff:a7:ab:5a:
6f:db:cb:fd:58:08:6e:eb:85:18:62:cf:a3:af:cd:b2:b7:5f:
5e:0a:14:0b:44:48:4a:ea:76:46:03:bc:e7:76:31:7b:24:89:
b1:0d:11:b4:f6:df:ac:59:40:64:cb:57:b0:bb:6f:47:5d:d8:
09:bf:bd:12:b4:87:d8:5e:e2:e1:a1:cf:23:84:6e:6d:24:ff:
38:22:01:ee:0b:9a:74:22:af:dc:62:4c:b0:fd:7d:d9:23:b6:
1a:a2:7f:22:20:ef:e7:e2:a2:54:34:ad:a3:33:cb:b5:bf:ef:
c8:d0:bd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 14:53:45 2026 by rpki-client