Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer
File: 8mzvyND2FJXOpWXLF0zPkuc6CJk.cer (raw, json)
Hash identifier: i3eVVbpaPpYWMgROdkarmGCG0QY3C/t8/3MuS4Q54cY=
Subject key identifier: F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A29A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Mar 2026 13:36:05 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 138602
IP: 103.134.84.0/24
IP: 2001:df7:c100::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172698 (0x2a29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 5 13:36:05 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9184A0A, serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:b2:03:8a:a3:16:2a:56:5e:16:20:38:62:
bd:08:46:cb:1b:f1:c7:7d:cd:17:8d:ce:19:9f:14:
e4:bb:f9:7f:e8:e7:a5:55:d0:86:74:31:61:ce:4c:
5e:91:6f:ad:ee:30:70:c4:db:5e:c4:a3:09:fd:2e:
65:ca:35:39:23:e5:4f:5c:e2:f2:2f:ad:54:0a:b8:
78:45:59:66:e4:b6:83:4f:5c:d1:e3:de:53:3d:d0:
aa:9f:06:5f:cb:0c:e9:b5:e9:1a:c2:53:4d:25:1f:
44:ba:a3:9d:2b:36:0e:eb:b0:3f:f2:62:1e:63:30:
fb:5d:08:50:98:94:3d:43:45:15:b7:29:93:a3:39:
ef:e8:f4:f9:dc:f2:af:b4:bf:0c:f7:4a:05:ae:38:
95:3f:67:84:8e:59:52:59:6f:c9:9f:89:f7:8f:c6:
2b:8c:1d:ce:c3:98:85:a0:cc:71:db:55:2d:14:0b:
5b:d2:53:09:09:ee:df:be:4c:45:38:67:ff:4b:fc:
34:5c:d0:63:f9:ae:e4:5c:54:e1:77:ea:9f:bc:69:
39:9e:6c:ca:d0:54:7f:24:3d:f5:22:60:1a:17:f2:
40:e2:10:dc:4e:c1:24:ec:d6:22:71:8e:12:02:d4:
e6:49:99:ab:04:6b:97:2d:39:3b:38:2f:71:ce:f2:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138602
sbgp-ipAddrBlock: critical
IPv4:
103.134.84.0/24
IPv6:
2001:df7:c100::/48
Signature Algorithm: sha256WithRSAEncryption
d7:63:cc:db:3d:6f:4e:9d:86:78:04:8d:dd:1b:96:0a:6e:f2:
12:27:c7:8a:c3:83:13:54:67:ab:ce:8f:df:bc:4e:7b:d9:59:
42:ce:9a:52:9d:83:a0:49:c9:75:bf:65:3e:66:8c:60:a4:d8:
6e:94:26:0f:18:47:88:f5:41:ac:65:0e:df:b7:f6:b3:38:a0:
d2:f5:d0:aa:78:ce:6d:6d:3f:45:33:0d:55:86:2b:b3:1a:36:
a4:c9:b4:41:42:c3:0d:17:af:91:3d:4a:92:98:58:fd:a2:79:
c0:3b:36:42:ae:6e:b8:5b:ce:9f:d7:e8:49:ba:67:60:12:20:
c6:38:43:09:60:23:4f:a8:e2:8d:ad:bb:7e:f7:4e:6a:7d:27:
bd:05:a5:31:d0:cb:b6:53:35:0f:9d:2b:05:87:78:e4:19:26:
a3:bb:76:58:4f:ee:a2:90:88:15:92:eb:cc:cc:d3:a0:a1:05:
7b:b2:c4:93:fa:b7:50:b2:60:f0:93:e0:34:0e:45:33:4c:40:
6a:8c:43:3b:7f:df:b2:05:17:7d:b9:61:4d:eb:da:a8:4d:f6:
95:6a:26:0f:ed:cf:41:c0:14:90:00:cb:f1:2b:6e:b7:28:cd:
fe:40:d1:e7:65:c5:53:55:42:9c:90:f1:36:54:ab:a4:1b:e2:
56:1f:47:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:19:22 2026 by rpki-client