Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer
File: 24aQ9k5_gyrPw6am6EIdQXfIlPY.cer (raw, json)
Hash identifier: CMIE23i6oSpTBV0wh6MhQVoY/Y8Zswey5km2THnTbN0=
Subject key identifier: DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AFD6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Apr 2026 14:59:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 151186
IP: 103.131.196.0/23
IP: 2001:df2:4740::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176086 (0x2afd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 28 14:59:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91F0FAA, serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c2:86:0a:38:54:2f:80:52:4e:44:fb:05:9a:
50:4e:83:1b:e4:56:e2:3f:b2:35:fc:b5:d0:12:7a:
84:93:2f:ad:27:21:cf:64:55:89:05:d6:38:fc:a8:
b2:2f:e8:14:0c:19:57:31:d3:3a:48:56:9a:db:81:
a6:68:51:04:86:e1:58:33:91:4f:b4:22:1d:70:b6:
76:f0:9e:41:a9:f9:a5:06:11:89:57:2b:4a:70:fe:
d3:cd:61:0f:4c:3d:4d:b9:2d:c3:51:73:db:08:98:
6e:8a:97:2b:0e:75:0d:f7:3b:ca:04:7f:07:32:11:
bf:17:80:6f:1d:27:0b:fa:66:03:cf:96:a1:05:b8:
75:59:85:00:df:a5:f4:e9:15:d4:19:5b:36:9b:13:
78:30:0c:cb:25:ae:33:08:b1:a6:30:b3:75:06:47:
37:20:86:8d:3a:f1:56:39:b2:f8:00:28:48:1e:1c:
49:90:bb:06:a3:1b:b4:83:6f:df:fd:7f:fb:17:7d:
c0:d2:c6:2a:d3:6f:33:a4:c7:1d:0a:0e:3a:46:61:
ed:f6:a5:44:0f:78:8f:83:0d:4f:22:a0:8e:a1:e7:
11:88:ed:aa:d4:c4:13:eb:cd:01:d6:6d:93:59:65:
6d:f6:d5:36:98:71:60:f4:1e:b7:0d:8e:bc:5e:5b:
fe:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151186
sbgp-ipAddrBlock: critical
IPv4:
103.131.196.0/23
IPv6:
2001:df2:4740::/48
Signature Algorithm: sha256WithRSAEncryption
4f:38:55:cc:4c:98:9d:e5:cc:f0:e3:6e:d9:eb:fb:4a:72:f4:
61:8a:33:81:b1:0c:7b:b6:ea:38:1c:67:c4:8d:f8:ce:44:52:
32:52:78:40:89:ec:17:7b:3d:2a:95:a3:42:00:24:5a:ff:d1:
e5:53:fb:fc:f6:a0:c8:62:5b:c9:cc:29:08:99:59:4d:d1:7a:
1d:d9:b7:c0:48:45:55:9a:7c:3f:3d:a8:fd:aa:80:b3:bc:45:
4a:c4:df:8c:8f:9b:cd:13:fa:73:1f:73:ec:fd:b5:c8:a9:46:
3a:ed:d2:83:dc:58:a0:e7:84:1b:48:c3:f3:72:ad:16:59:7a:
a1:53:0b:93:8b:1e:4e:95:cb:af:2d:3b:c4:26:8f:05:6f:20:
ba:84:82:81:09:02:ad:68:fc:b5:99:b5:80:d5:8d:e2:99:7f:
97:78:ad:46:ed:09:3d:57:5e:fb:ec:cf:6d:d9:9c:24:28:ec:
b6:c3:13:17:24:e6:cc:c4:c1:f4:23:83:d0:8c:0c:09:6f:52:
a6:0a:b2:95:ed:0d:fe:7b:da:26:4f:8e:82:b2:57:f1:2c:ee:
f7:a4:a7:c7:d2:48:c5:07:ec:9c:3a:ea:89:61:80:6a:34:34:
f1:d4:c3:88:7a:d3:23:d6:37:72:1a:cf:e0:d1:7a:89:23:2e:
40:53:b7:db
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAq/WMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDQyODE0NTkzN1oXDTI3MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjBGQUExMTAvBgNVBAUTKERCODY5MEY2NEU3RjgzMkFDRkMzQTZB
NkU4NDIxRDQxNzdDODk0RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDtwoYKOFQvgFJORPsFmlBOgxvkVuI/sjX8tdASeoSTL60nIc9kVYkF1jj8qLIv
6BQMGVcx0zpIVprbgaZoUQSG4VgzkU+0Ih1wtnbwnkGp+aUGEYlXK0pw/tPNYQ9M
PU25LcNRc9sImG6KlysOdQ33O8oEfwcyEb8XgG8dJwv6ZgPPlqEFuHVZhQDfpfTp
FdQZWzabE3gwDMslrjMIsaYws3UGRzcgho068VY5svgAKEgeHEmQuwajG7SDb9/9
f/sXfcDSxirTbzOkxx0KDjpGYe32pUQPeI+DDU8ioI6h5xGI7arUxBPrzQHWbZNZ
ZW321TaYcWD0HrcNjrxeW/7hAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU24aQ9k5/
gyrPw6am6EIdQXfIlPYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUYwRkFBL0ZFMTAxQ0NDRjg5ODExRUQ4NjIzNUY2OEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGMEZBQS9GRTEwMUNDQ0Y4OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1
X2d5clB3NmFtNkVJZFFYZklsUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAk6SMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ4PEMA8EAgAC
MAkDBwAgAQ3yR0AwDQYJKoZIhvcNAQELBQADggEBAE84VcxMmJ3lzPDjbtnr+0py
9GGKM4GxDHu26jgcZ8SN+M5EUjJSeECJ7Bd7PSqVo0IAJFr/0eVT+/z2oMhiW8nM
KQiZWU3Reh3Zt8BIRVWafD89qP2qgLO8RUrE34yPm80T+nMfc+z9tcipRjrt0oPc
WKDnhBtIw/NyrRZZeqFTC5OLHk6Vy68tO8QmjwVvILqEgoEJAq1o/LWZtYDVjeKZ
f5d4rUbtCT1XXvvsz23ZnCQo7LbDExck5szEwfQjg9CMDAlvUqYKspXtDf572iZP
joKyV/Es7vekp8fSSMUH7Jw66olhgGo0NPHUw4h60yPWN3Iaz+DReokjLkBTt9s=
-----END CERTIFICATE-----
Generated at Wed May 13 05:17:22 2026 by rpki-client