Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyzSxxoRGjdJaH9O5xIgN4pA8yU.cer
File: LyzSxxoRGjdJaH9O5xIgN4pA8yU.cer (raw, json)
Hash identifier: BkKJfGwNbg6WayGbROx5i4UmAYfl0M5iBZGaYiAJ8J8=
Subject key identifier: 2F:2C:D2:C7:1A:11:1A:37:49:68:7F:4E:E7:12:20:37:8A:40:F3:25
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D44B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 07 Sep 2026 08:18:52 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 139633
IP: 103.142.226.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185419 (0x2d44b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 7 08:18:52 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A911F85F, serialNumber=2F2CD2C71A111A3749687F4EE71220378A40F325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:1e:a8:8b:58:bb:2f:1c:b3:50:c1:05:5e:
44:51:0a:83:ac:62:c5:34:ea:48:25:57:c8:f7:a8:
1f:40:29:93:9a:0f:72:5b:8d:db:b9:f6:e7:78:cf:
b2:9e:5a:8c:03:8d:56:f0:2b:9f:56:2e:ec:6a:e6:
df:48:81:29:3d:29:96:ff:c5:c1:53:97:e6:a5:e6:
d2:d6:02:85:ed:ea:a9:6a:e8:06:e5:f4:31:35:c5:
c5:b6:73:b0:b7:d8:bb:57:0d:a7:eb:5d:50:57:8b:
4f:88:6b:b3:a4:26:e2:5c:84:07:f1:1f:ea:bd:b8:
ea:01:49:f7:7c:5e:1c:50:8d:d2:9b:52:95:bc:fa:
f2:54:52:f2:df:0f:5c:5e:4b:ff:3f:cf:3f:5e:be:
9f:2a:80:5d:d4:8d:4f:8e:f4:6a:be:4e:b0:91:80:
4b:46:68:3a:cf:27:77:bd:5b:7e:c7:cd:77:73:ff:
a1:b7:7b:3f:16:96:93:db:3b:df:86:d0:0b:98:b0:
ee:41:0b:8a:0c:70:bd:f3:1c:3d:5c:c6:ec:90:6e:
6d:49:f1:bd:f9:4e:a3:de:e0:08:fe:76:37:07:5d:
d0:bc:37:ae:50:1b:fb:2b:95:67:22:4b:64:a5:4a:
35:2b:a0:fa:36:62:8f:dd:cb:c3:d7:2f:9b:22:d8:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2C:D2:C7:1A:11:1A:37:49:68:7F:4E:E7:12:20:37:8A:40:F3:25
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139633
sbgp-ipAddrBlock: critical
IPv4:
103.142.226.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:9b:10:3d:69:53:f8:12:12:5f:5d:ca:9a:1e:d7:2e:ed:a9:
d4:91:82:ae:3e:3c:a0:b2:6d:e5:da:84:f4:c8:fb:95:58:6e:
a0:e3:95:83:be:29:72:f0:fe:e7:03:82:d0:4a:4a:0e:d6:a5:
dd:f1:59:0d:30:12:1e:4f:fa:62:38:a3:cb:9a:00:85:68:96:
59:0e:9b:a5:97:a8:3a:fa:e1:c7:6a:15:33:f6:56:e3:35:07:
1d:1f:29:2c:88:0e:50:cb:b4:32:9a:ee:86:b7:4d:fb:84:93:
c2:94:63:89:f9:37:71:5f:32:4d:c6:9f:be:b0:2b:55:11:5e:
10:e3:67:22:b5:95:f9:74:81:da:cd:01:e2:b5:fb:da:6b:93:
0c:3e:48:0a:e5:22:db:d6:70:bb:ee:86:bd:ac:25:0c:c5:d1:
1c:94:04:ac:dc:bc:06:6a:73:1e:31:f6:b2:99:b8:e7:5d:26:
89:2f:d0:40:5e:f2:73:7b:6d:98:bc:07:ea:c1:55:5b:79:76:
15:5d:56:aa:a6:d5:93:d5:b4:58:49:23:70:8f:77:74:da:63:
98:08:33:54:50:40:89:1e:f2:e6:9a:38:a3:2c:4f:84:07:6c:
49:24:24:7c:84:e2:7e:95:6d:7a:a6:a5:3a:bf:57:30:bf:b4:
19:fe:c1:fd
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAtRLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDkwNzA4MTg1MloXDTI3MTIwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMUY4NUYxMTAvBgNVBAUTKDJGMkNEMkM3MUExMTFBMzc0OTY4N0Y0
RUU3MTIyMDM3OEE0MEYzMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+mh6oi1i7LxyzUMEFXkRRCoOsYsU06kglV8j3qB9AKZOaD3Jbjdu59ud4z7Ke
WowDjVbwK59WLuxq5t9IgSk9KZb/xcFTl+al5tLWAoXt6qlq6Abl9DE1xcW2c7C3
2LtXDafrXVBXi0+Ia7OkJuJchAfxH+q9uOoBSfd8XhxQjdKbUpW8+vJUUvLfD1xe
S/8/zz9evp8qgF3UjU+O9Gq+TrCRgEtGaDrPJ3e9W37HzXdz/6G3ez8WlpPbO9+G
0AuYsO5BC4oMcL3zHD1cxuyQbm1J8b35TqPe4Aj+djcHXdC8N65QG/srlWciS2Sl
SjUroPo2Yo/dy8PXL5si2Dv9AgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQULyzSxxoR
GjdJaH9O5xIgN4pA8yUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTFGODVGLzg4RjAyQjk0NDkxQzExRjFCOUVEMzdBMjlEODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExRjg1Ri84OEYwMkI5NDQ5MUMxMUYxQjlFRDM3QTI5RDgzMzc3My9MeXpTeHhv
UkdqZEphSDlPNXhJZ040cEE4eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiFxMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ47iMA0GCSqG
SIb3DQEBCwUAA4IBAQAqmxA9aVP4EhJfXcqaHtcu7anUkYKuPjygsm3l2oT0yPuV
WG6g45WDvily8P7nA4LQSkoO1qXd8VkNMBIeT/piOKPLmgCFaJZZDpull6g6+uHH
ahUz9lbjNQcdHyksiA5Qy7Qymu6Gt037hJPClGOJ+TdxXzJNxp++sCtVEV4Q42ci
tZX5dIHazQHitfvaa5MMPkgK5SLb1nC77oa9rCUMxdEclASs3LwGanMeMfaymbjn
XSaJL9BAXvJze22YvAfqwVVbeXYVXVaqptWT1bRYSSNwj3d02mOYCDNUUECJHvLm
mjijLE+EB2xJJCR8hOJ+lW16pqU6v1cwv7QZ/sH9
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:28:37 2026 by rpki-client