Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
File: 3K6HG3xct5vH7PZ5s7LTyVan2eM.cer (raw, json)
Hash identifier: LmRdqcxxPTq2lnJh8Od4RIJd6YMFIxMG+IDefF9Ccy0=
Subject key identifier: DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A648
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 25 Mar 2026 13:12:41 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 137455
IP: 103.2.240.0/22
IP: 103.74.200.0/22
IP: 103.109.112.0/22
IP: 2402:78c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173640 (0x2a648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 25 13:12:41 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91604AC, serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:1e:ae:59:54:1a:d3:64:3e:24:34:da:31:
07:59:68:e2:75:33:df:4f:03:2c:34:87:19:9b:b9:
36:ac:02:a5:f8:63:09:ee:cd:6f:96:20:ca:66:c9:
79:e5:c8:e0:62:78:a1:09:f6:f8:c7:19:83:bc:7f:
c9:20:bf:6e:f2:50:72:bf:45:e3:d0:a3:ed:21:65:
29:81:e7:73:27:db:09:0b:50:12:34:fb:cd:9d:80:
24:4f:7a:ef:a3:bc:52:a5:74:9d:57:fd:cd:0b:31:
0b:1f:45:ed:8f:ab:ed:02:2c:b8:93:9b:77:65:49:
46:86:c3:9b:96:73:ef:ae:f3:91:21:d7:2a:61:77:
ed:de:af:da:1f:db:27:bf:4d:7b:01:c2:4a:be:68:
07:db:da:51:46:95:99:b1:8c:9a:9a:47:11:f1:55:
1c:bc:81:2a:5c:9c:f1:ac:91:a5:de:cf:ce:67:c6:
28:df:f8:a1:26:37:a7:f1:34:50:3e:66:95:06:c7:
7a:00:36:9b:13:35:55:26:14:83:b4:2b:8c:55:1c:
5f:e6:15:de:c2:14:19:15:66:bd:da:cb:13:cf:60:
a0:97:e1:d2:01:5e:50:5c:19:9b:5e:19:4e:83:b7:
4d:a6:d9:bc:01:f2:3f:b9:1b:04:ba:a8:08:b4:71:
c3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137455
sbgp-ipAddrBlock: critical
IPv4:
103.2.240.0/22
103.74.200.0/22
103.109.112.0/22
IPv6:
2402:78c0::/32
Signature Algorithm: sha256WithRSAEncryption
6c:94:37:bd:f6:b5:d6:1c:07:16:ed:7c:e0:a4:9c:66:d9:8c:
6c:b5:7d:61:bb:e5:aa:04:fe:16:1f:dc:2d:b2:bf:2a:8e:94:
f4:43:12:02:0f:09:9b:3d:35:ca:7f:53:af:e1:ea:73:ee:9a:
6b:f5:00:b0:f6:48:b9:9c:af:94:39:45:67:f8:f1:10:e6:ec:
a9:ef:ef:cf:d4:bd:43:f7:85:b3:33:54:e6:1e:0f:ac:eb:5c:
db:1f:8c:d8:9b:c4:86:73:ed:ad:f3:57:26:d6:d9:98:de:57:
31:e7:ed:4f:aa:c2:4a:77:b6:f6:61:c2:00:f8:0e:34:92:04:
ff:b1:da:76:19:8e:4a:aa:18:6a:26:41:00:8d:04:df:19:37:
59:11:77:8d:d7:b5:2c:44:98:53:fd:5d:ac:5b:d4:3b:c4:6c:
2d:c1:83:73:4d:d6:6c:85:f5:3b:f7:ad:de:da:ea:f6:60:c7:
aa:16:df:e3:4e:7a:5a:7f:42:e4:68:04:f5:a0:88:77:6b:18:
c0:ee:48:e2:03:9a:58:78:62:7b:74:1d:24:d8:7d:19:85:50:
96:f2:4f:20:2c:36:03:4a:57:c4:82:47:d7:1c:d0:11:e6:d1:
f1:30:b8:60:32:60:69:25:c9:fa:9d:06:36:1e:cc:69:5e:18:
8f:f9:ec:18
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIDAqZIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMyNTEzMTI0MVoXDTI3MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjA0QUMxMTAvBgNVBAUTKERDQUU4NzFCN0M1Q0I3OUJDN0VDRjY3
OUIzQjJEM0M5NTZBN0Q5RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCox6uWVQa02Q+JDTaMQdZaOJ1M99PAyw0hxmbuTasAqX4YwnuzW+WIMpmyXnl
yOBieKEJ9vjHGYO8f8kgv27yUHK/RePQo+0hZSmB53Mn2wkLUBI0+82dgCRPeu+j
vFKldJ1X/c0LMQsfRe2Pq+0CLLiTm3dlSUaGw5uWc++u85Eh1yphd+3er9of2ye/
TXsBwkq+aAfb2lFGlZmxjJqaRxHxVRy8gSpcnPGskaXez85nxijf+KEmN6fxNFA+
ZpUGx3oANpsTNVUmFIO0K4xVHF/mFd7CFBkVZr3ayxPPYKCX4dIBXlBcGZteGU6D
t02m2bwB8j+5GwS6qAi0ccNzAgMBAAGjggMqMIIDJjAdBgNVHQ4EFgQU3K6HG3xc
t5vH7PZ5s7LTyVan2eMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTYwNEFDLzQ5NzIwOTk2ODE0NTExRUJCMkRENUQ0QkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2MDRBQy80OTcyMDk5NjgxNDUxMUVCQjJERDVENEJDNEY5QUUwMi8zSzZIRzN4
Y3Q1dkg3UFo1czdMVHlWYW4yZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhjvMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCZwLwAwQCZ0rI
AwQCZ21wMA0EAgACMAcDBQAkAnjAMA0GCSqGSIb3DQEBCwUAA4IBAQBslDe99rXW
HAcW7XzgpJxm2YxstX1hu+WqBP4WH9wtsr8qjpT0QxICDwmbPTXKf1Ov4epz7ppr
9QCw9ki5nK+UOUVn+PEQ5uyp7+/P1L1D94WzM1TmHg+s61zbH4zYm8SGc+2t81cm
1tmY3lcx5+1PqsJKd7b2YcIA+A40kgT/sdp2GY5KqhhqJkEAjQTfGTdZEXeN17Us
RJhT/V2sW9Q7xGwtwYNzTdZshfU7963e2ur2YMeqFt/jTnpaf0LkaAT1oIh3axjA
7kjiA5pYeGJ7dB0k2H0ZhVCW8k8gLDYDSlfEgkfXHNAR5tHxMLhgMmBpJcn6nQY2
HsxpXhiP+ewY
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:15:25 2026 by rpki-client