Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer
File: -9GoSKH4mo0k2wtoF6CH-y313wg.cer (raw, json)
Hash identifier: a9heaAegQSpV/MbLQbLrdO4e1C4MP20odkb4K5Ewb9g=
Subject key identifier: FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A404
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 12 Mar 2026 14:09:57 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 150779
IP: 103.93.34.0/23
IP: 2400:e260::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173060 (0x2a404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 12 14:09:57 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91BAFCE, serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:52:20:a2:aa:44:80:ab:94:7c:ab:7a:1b:
f8:d8:03:5a:9d:94:a7:40:a2:69:3e:02:e1:db:e1:
26:86:24:10:ab:ca:80:13:71:28:11:a8:d0:5b:0a:
02:9a:58:36:2b:df:2c:8b:50:62:fd:0c:2f:4e:57:
ec:5a:58:c3:f5:31:aa:8b:83:59:7c:4d:25:4b:b9:
3b:4b:9a:e6:1c:7a:dd:dd:8d:87:e0:82:13:20:2c:
7d:ea:97:1c:09:aa:1f:20:b2:dc:39:98:bc:fa:4d:
1d:49:8b:88:c4:c9:87:2e:51:aa:18:b1:8a:37:2e:
ac:6d:72:3c:32:98:e8:cd:aa:d3:a6:ac:51:cf:02:
f4:92:49:a5:b8:1e:23:9e:99:fb:f8:21:ea:32:27:
d7:64:a4:a4:34:82:31:e3:eb:d0:53:3c:0e:e7:67:
83:05:41:87:52:fd:d9:da:e5:2c:0e:98:d6:6b:5b:
da:c8:c4:01:e7:40:73:57:11:2f:5e:9f:11:cc:b5:
4b:87:22:8f:bf:45:80:26:e0:a6:52:99:a3:d6:13:
4e:85:37:37:46:b5:0e:e5:01:24:a0:d6:bc:8c:8c:
b8:f9:4d:b8:87:08:63:dc:e5:4d:5f:a9:ad:d2:43:
a8:65:aa:d8:a8:7c:c6:41:af:df:27:ea:2a:ef:5d:
89:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150779
sbgp-ipAddrBlock: critical
IPv4:
103.93.34.0/23
IPv6:
2400:e260::/32
Signature Algorithm: sha256WithRSAEncryption
6b:8a:fd:1d:5c:53:91:45:a8:d9:39:f6:81:87:df:19:75:0a:
ea:52:66:17:d1:e2:e4:b1:f2:06:92:46:8f:de:59:93:a7:da:
80:a2:33:dc:3f:b3:2d:77:cf:51:41:77:03:b1:66:2e:5e:9a:
1f:da:e0:c3:a0:f7:42:1d:87:ab:22:b7:ef:1d:bd:72:59:cf:
d0:83:21:f7:48:74:81:e4:dd:d3:3d:a0:45:df:17:00:bc:f4:
eb:4c:a4:41:36:dc:39:00:15:f6:57:46:44:95:d6:2e:7a:f3:
5a:7f:5a:63:ce:34:9c:f8:7b:6f:4d:05:91:e6:69:ed:86:d3:
95:4d:2c:2f:44:d5:20:94:fd:12:54:d5:9a:d7:41:1e:cd:65:
0a:6a:c0:f8:a1:7e:c9:fb:23:a3:62:ad:54:05:57:db:58:77:
7f:43:fa:df:32:17:d0:6a:b8:2e:63:63:90:80:24:50:5c:07:
57:b7:23:12:d3:c5:d2:e3:0f:5e:ae:05:93:81:d0:8b:9f:f8:
7e:81:72:cd:72:15:d5:ce:9e:eb:a4:36:e9:f1:43:ba:e4:be:
6d:90:0c:11:3a:54:b7:df:53:e7:8a:33:51:bf:da:77:ee:a7:
30:f7:07:aa:1f:b0:5c:94:3d:b3:21:9c:0e:2d:a1:7f:2e:a9:
79:56:12:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:19:45 2026 by rpki-client