Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyzSxxoRGjdJaH9O5xIgN4pA8yU.cer
File: LyzSxxoRGjdJaH9O5xIgN4pA8yU.cer (raw, json)
Hash identifier: c3R2L2kB9UKF/Z3m2bLOqBIrm2EB1uuGUp6EtoznecQ=
Subject key identifier: 2F:2C:D2:C7:1A:11:1A:37:49:68:7F:4E:E7:12:20:37:8A:40:F3:25
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B2A4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 06 May 2026 07:23:57 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 139633
IP: 103.142.226.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176804 (0x2b2a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 6 07:23:57 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A911F85F, serialNumber=2F2CD2C71A111A3749687F4EE71220378A40F325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:1e:a8:8b:58:bb:2f:1c:b3:50:c1:05:5e:
44:51:0a:83:ac:62:c5:34:ea:48:25:57:c8:f7:a8:
1f:40:29:93:9a:0f:72:5b:8d:db:b9:f6:e7:78:cf:
b2:9e:5a:8c:03:8d:56:f0:2b:9f:56:2e:ec:6a:e6:
df:48:81:29:3d:29:96:ff:c5:c1:53:97:e6:a5:e6:
d2:d6:02:85:ed:ea:a9:6a:e8:06:e5:f4:31:35:c5:
c5:b6:73:b0:b7:d8:bb:57:0d:a7:eb:5d:50:57:8b:
4f:88:6b:b3:a4:26:e2:5c:84:07:f1:1f:ea:bd:b8:
ea:01:49:f7:7c:5e:1c:50:8d:d2:9b:52:95:bc:fa:
f2:54:52:f2:df:0f:5c:5e:4b:ff:3f:cf:3f:5e:be:
9f:2a:80:5d:d4:8d:4f:8e:f4:6a:be:4e:b0:91:80:
4b:46:68:3a:cf:27:77:bd:5b:7e:c7:cd:77:73:ff:
a1:b7:7b:3f:16:96:93:db:3b:df:86:d0:0b:98:b0:
ee:41:0b:8a:0c:70:bd:f3:1c:3d:5c:c6:ec:90:6e:
6d:49:f1:bd:f9:4e:a3:de:e0:08:fe:76:37:07:5d:
d0:bc:37:ae:50:1b:fb:2b:95:67:22:4b:64:a5:4a:
35:2b:a0:fa:36:62:8f:dd:cb:c3:d7:2f:9b:22:d8:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2C:D2:C7:1A:11:1A:37:49:68:7F:4E:E7:12:20:37:8A:40:F3:25
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139633
sbgp-ipAddrBlock: critical
IPv4:
103.142.226.0/23
Signature Algorithm: sha256WithRSAEncryption
49:e0:43:4b:4d:ba:cd:4f:e5:37:e1:d3:cc:87:3c:b4:19:3d:
63:14:be:e5:88:38:2c:bd:6b:60:a9:0d:b7:35:fb:d7:13:20:
8f:d9:a3:f8:f9:d1:bc:22:e3:91:0a:f7:64:27:66:07:e0:a6:
5d:28:ff:62:09:06:de:3a:3f:f7:b3:be:64:1b:d7:e5:a7:e4:
ed:e9:ca:20:89:02:c6:a5:d8:f7:f0:a5:bd:07:1b:1e:d1:7b:
c5:dc:23:61:b5:ea:af:a1:34:57:54:50:48:33:94:4e:0a:a5:
31:96:0a:5b:28:4a:2f:bd:13:5e:6b:07:b5:a7:37:88:f1:76:
a7:6f:af:1b:bb:d6:b8:ce:3e:e8:9d:e9:5f:af:00:a2:5d:6c:
14:48:44:37:ec:8a:5d:91:8c:30:e2:ef:a7:32:5e:b5:b7:60:
46:1e:81:b8:bf:b1:0f:b7:92:ee:2c:1f:cc:45:c6:19:71:b7:
b9:0d:50:30:b7:83:e5:30:4d:2e:b7:e6:14:ee:9b:d3:7c:dc:
2d:b8:16:fc:f6:ac:65:d9:06:70:2b:fa:70:e1:be:aa:cf:cf:
72:9f:28:59:46:67:9d:1c:cc:3a:56:06:1e:74:bb:50:67:d1:
3e:aa:29:5b:71:71:6a:b7:25:a9:aa:48:39:5f:25:e8:8b:b6:
38:f4:6f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:14 2026 by rpki-client