Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer
File: -gEnQNykk8ziA6-q3o68cZqsI7Q.cer (raw, json)
Hash identifier: NBqaf5T/3mGV5yXS5yeIib0sLHST2zOjsx2mZ1lZw4s=
Subject key identifier: FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BA80
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 03 Jun 2026 14:34:06 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 135327
AS: 151328
IP: 103.197.104.0/23
IP: 2400:fe20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178816 (0x2ba80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 3 14:34:06 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A91AF404, serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:a7:c4:ac:3d:c8:4d:02:d2:04:56:4d:03:
1a:5f:d0:e8:23:b2:78:00:4d:9c:26:77:04:67:9c:
08:52:4a:d0:d5:99:08:82:c8:d6:e1:e1:58:fa:ac:
87:d7:f5:73:de:8e:5a:49:25:fd:21:53:4c:39:7b:
5c:72:05:6c:42:c6:ee:76:9b:c8:9e:7f:42:8e:3e:
30:9a:30:59:b9:ee:f5:f8:08:1f:e7:1a:e4:c7:e8:
d8:e8:05:3a:b2:7a:48:da:48:95:95:f4:cc:e7:da:
d3:76:25:1a:e8:98:1d:55:67:3a:4c:d7:97:f7:17:
8a:c5:a5:5d:17:bb:09:fd:2a:34:a4:af:c7:7a:4a:
01:48:eb:8e:65:27:de:14:41:53:2f:23:dd:78:eb:
5d:e1:e8:47:f4:ca:1f:8d:83:fe:91:75:35:eb:6b:
e3:31:36:bc:49:e2:8e:b6:ad:3a:5e:43:3d:cc:ae:
dc:dc:c1:66:34:b6:d4:d3:58:81:2a:21:22:d4:43:
a2:4c:9b:90:b2:b0:f6:e8:63:70:1b:52:d7:01:f1:
d8:d7:61:01:d6:af:52:02:39:e7:43:ec:07:76:33:
6f:88:9f:08:c4:b9:0c:65:97:76:aa:41:67:11:cc:
ce:5f:84:16:3b:6c:b1:ef:fd:b6:ee:7f:42:41:8c:
75:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135327
151328
sbgp-ipAddrBlock: critical
IPv4:
103.197.104.0/23
IPv6:
2400:fe20::/32
Signature Algorithm: sha256WithRSAEncryption
66:20:c6:35:14:29:a0:06:fd:46:52:72:ec:96:81:8b:bb:5c:
ab:34:4f:cb:7e:3c:91:a1:74:df:d7:97:8b:98:83:3d:d1:d2:
2a:2e:e8:e7:45:05:eb:53:88:a4:b2:55:5a:b0:50:8b:27:fb:
ca:cb:f7:79:e8:cd:d1:fe:c6:65:35:74:99:b5:ce:ed:9a:c9:
47:01:73:6b:89:4b:ec:7b:b5:b1:e6:c5:3d:e7:dd:1b:a4:b2:
91:59:45:77:3c:c4:35:6e:1d:42:83:bf:c7:2a:2f:24:c2:94:
4c:f5:8a:03:20:fc:34:09:01:e3:87:69:4b:f6:66:ca:ad:19:
a2:80:a2:72:26:2a:22:df:9f:cb:f7:4b:91:ab:1b:8a:0e:fa:
41:22:3c:04:30:85:7d:d4:d7:3d:70:28:5e:d6:ec:45:33:f4:
ff:e3:3f:ea:b8:e6:70:1f:8f:22:7a:51:c8:88:72:58:51:5b:
81:ee:2d:df:d6:df:36:2a:5f:50:18:50:ac:8e:a0:3d:60:76:
27:69:be:cf:d9:27:30:31:89:fc:51:42:7c:e6:a7:d8:fb:2a:
bb:b0:e6:a3:8c:ba:b7:31:93:00:39:1d:45:32:89:fc:d1:fd:
b9:d2:64:df:f5:d2:e1:08:15:93:77:26:e2:7e:50:56:f7:da:
71:2d:46:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:23:57 2026 by rpki-client