Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MnOwPy4zLyvexzByLIVJW33h48.cer
File: 3MnOwPy4zLyvexzByLIVJW33h48.cer (raw, json)
Hash identifier: LSCyXm6KwW79P1yBCrxoMUD9TY5CBmMpE5Piq+FgbBY=
Subject key identifier: DC:C9:CE:C0:FC:B8:CC:BC:AF:7B:1C:C1:C8:B2:15:25:6D:F7:87:8F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C683
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Jul 2026 10:43:04 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 7598
IP: 103.1.196.0/22
IP: 116.50.56.0/21
IP: 2400:5e00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181891 (0x2c683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 22 10:43:04 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A917E10B, serialNumber=DCC9CEC0FCB8CCBCAF7B1CC1C8B215256DF7878F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:26:fe:b3:3a:2d:1b:a3:6d:74:d5:50:a3:
e7:80:5b:74:21:55:03:84:2f:0d:e3:a9:31:b7:7e:
29:4c:07:7b:45:d6:cc:1e:d3:8f:de:9a:97:6c:df:
d0:63:fb:2e:a9:6e:f8:fd:27:ee:1a:c8:d7:93:b7:
9e:51:60:5d:d1:be:45:85:e6:c9:97:8e:c8:22:5e:
53:1a:f3:e7:5f:dd:27:d0:75:d8:3a:77:00:b2:0a:
fa:1f:38:bf:9e:30:d3:8d:ac:9c:27:c5:c3:6a:01:
20:69:f9:40:3b:d7:37:26:49:b2:7b:65:38:d4:e2:
7f:1b:a7:41:4a:aa:0b:08:8e:7a:de:4b:22:4e:22:
a1:08:cb:61:f7:bd:19:d8:64:7c:2a:38:02:53:06:
d2:43:77:18:f9:68:7d:8b:0f:59:5a:53:b6:0c:ca:
67:18:fb:5d:02:5a:73:a7:43:41:73:b2:e6:95:ff:
3b:a8:96:31:11:18:58:38:5a:11:ce:23:8f:9d:8f:
df:45:a6:57:28:fc:ef:12:36:8b:55:1d:ca:3f:19:
7b:0e:de:13:02:e5:5b:3b:20:98:cd:d0:2a:c7:4f:
32:52:22:f4:18:5c:c7:7f:ca:5a:d4:1a:d3:50:97:
5d:28:d8:64:8b:1c:3e:16:39:1c:e7:d2:92:de:e0:
33:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C9:CE:C0:FC:B8:CC:BC:AF:7B:1C:C1:C8:B2:15:25:6D:F7:87:8F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E10B/1B40D2B285BA11F1B4DBBCA460A30FBC/3MnOwPy4zLyvexzByLIVJW33h48.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7598
sbgp-ipAddrBlock: critical
IPv4:
103.1.196.0/22
116.50.56.0/21
IPv6:
2400:5e00::/32
Signature Algorithm: sha256WithRSAEncryption
75:c2:fd:74:09:a5:83:d8:d9:d3:bd:39:8c:21:ec:a7:bf:ba:
3e:49:e5:c1:e1:f6:f3:9c:a9:e1:3a:55:8e:f2:fa:3a:ea:9f:
d7:42:d0:50:2a:ef:03:2a:81:f1:a1:7a:28:23:af:f8:19:17:
e3:81:2a:80:00:1b:9b:bd:d5:38:79:82:11:95:b7:73:68:b3:
c5:bd:bc:51:4c:12:32:6d:b4:c8:02:0e:e2:17:ce:d6:89:38:
e1:09:7c:97:f1:b2:ed:b6:20:64:af:19:f6:d5:2f:39:02:3c:
1c:04:22:9a:ba:e5:fa:93:40:8b:48:13:da:04:57:0c:17:98:
4a:28:51:d1:7f:b9:38:96:89:7d:ea:15:04:04:ba:75:d5:e9:
ae:82:d5:da:c5:76:75:3b:47:fd:bb:e6:2e:f5:8b:ba:e7:f6:
80:30:19:cb:bb:71:02:d5:eb:04:8f:c3:99:d4:bb:20:e4:02:
fc:d5:97:c7:fd:23:b5:9b:fb:8e:04:a7:84:4d:1e:cc:64:9a:
b4:e7:7d:8b:d1:17:4d:26:80:6d:38:fa:38:e8:4f:80:75:53:
84:0d:2a:11:2a:89:07:62:33:78:95:7e:b2:05:ed:43:f0:3a:
46:db:5f:6e:6b:5b:9d:4b:29:1f:55:33:5f:d0:54:89:88:d5:
4c:7f:dd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:18:02 2026 by rpki-client