Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60Y5e044RmfgPE26UHVUDwA30bg.cer
File: 60Y5e044RmfgPE26UHVUDwA30bg.cer (raw, json)
Hash identifier: pWijeDFZVkzWiDMO2bHpUwngjm0UB09boNeiOrHMyJ4=
Subject key identifier: EB:46:39:7B:4E:38:46:67:E0:3C:4D:BA:50:75:54:0F:00:37:D1:B8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A5ED
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 24 Mar 2026 00:15:32 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 136394
IP: 103.86.112.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 23:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173549 (0x2a5ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 24 00:15:32 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9176DA8, serialNumber=EB46397B4E384667E03C4DBA5075540F0037D1B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fe:fe:90:95:76:fc:ca:2a:7c:6c:09:cb:7a:
46:95:52:82:9e:5c:80:4c:e9:e3:fe:60:fe:2d:a7:
ec:3a:84:6e:3c:7b:d6:14:8f:86:d7:b0:36:44:38:
d2:8e:55:81:87:ea:49:52:9d:23:46:87:39:23:9a:
96:51:c6:e4:5f:ac:c1:12:8d:6e:19:94:97:99:32:
29:7f:db:4e:d6:cb:a3:e4:a6:e0:58:02:bf:be:76:
bc:2b:d4:08:cd:6a:7d:1e:3b:50:f6:3a:a2:cd:32:
fb:ab:71:a7:dd:78:c3:06:45:fa:71:b7:2b:25:f2:
b0:ff:e8:71:f8:85:d8:57:6f:c2:16:6d:c1:d0:42:
95:28:0c:dc:a5:b2:f2:fe:92:a3:75:09:ad:00:9d:
be:24:32:42:87:b6:86:7c:91:5f:1a:4d:84:20:8e:
2f:a8:8d:1b:e6:25:80:b8:d8:da:c9:79:7f:34:3d:
05:42:cf:2a:ad:ce:31:5f:ce:48:c0:1c:6d:2f:2a:
fd:58:76:e4:e3:39:1d:53:26:fd:29:d8:55:17:a5:
02:89:f0:61:df:b4:07:3f:bb:09:28:b3:bd:2a:5e:
86:54:22:76:86:9a:fd:d4:61:9f:1c:da:a4:88:05:
f1:9a:f0:44:64:32:4c:0a:ef:c9:ea:6c:2d:da:31:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:46:39:7B:4E:38:46:67:E0:3C:4D:BA:50:75:54:0F:00:37:D1:B8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136394
sbgp-ipAddrBlock: critical
IPv4:
103.86.112.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:cc:ae:f8:f2:0a:2e:e4:96:36:16:39:6a:7b:0d:c3:fa:1d:
a8:92:5d:7e:7d:62:ae:1b:6b:a7:6a:06:f8:e8:b9:c7:09:d9:
ea:6e:64:b1:1b:c4:da:30:62:27:38:ba:25:d9:af:2c:61:00:
d8:cb:18:77:47:ee:ca:39:c0:56:3e:6f:80:d5:8c:b9:cb:17:
01:47:ad:0a:8f:98:22:e4:53:40:cc:3a:57:9a:7c:0d:08:0c:
8e:07:18:b9:2c:a1:80:88:d3:cb:a4:5e:7f:fc:64:f4:3f:ad:
3d:4e:41:4e:a6:e2:d2:70:cf:db:ee:7a:5b:af:80:32:e1:c1:
58:9a:ef:8d:dc:03:a0:7e:ca:47:17:77:6b:5d:b8:24:6e:c2:
6b:d4:6e:85:79:92:2c:f7:3a:cf:cf:5a:3a:d1:52:13:1e:90:
80:83:ad:02:25:be:2d:72:39:2d:d4:04:07:b7:7b:5b:82:32:
f0:4f:b6:49:da:c6:16:f4:d0:04:7e:d9:09:91:3e:08:70:46:
7b:76:f1:30:b0:55:7b:8a:78:cb:75:01:4d:4d:22:d2:b1:61:
fb:39:bf:8c:90:a7:f1:91:dd:50:0c:02:0b:b8:7e:35:37:c3:
dd:9c:8c:29:4c:c3:5c:c1:bf:05:87:16:62:c9:00:94:9e:61:
b9:68:8c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:12:28 2026 by rpki-client