Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer
File: ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer (raw, json)
Hash identifier: suh11I3sz1r3bMybS9A3+zFjAQPc15EpI2GNBuXDJEo=
Subject key identifier: 66:65:4E:01:20:39:32:6E:13:D3:CD:9E:F5:8D:A9:EF:07:77:22:77
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A12A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Mar 2026 12:43:43 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 136225
IP: 45.120.196.0/22
IP: 103.84.52.0/22
IP: 2400:9ac0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172330 (0x2a12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 2 12:43:43 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9129738, serialNumber=66654E012039326E13D3CD9EF58DA9EF07772277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:c4:4f:a4:32:5d:39:7a:a7:7f:43:b8:69:
78:6a:55:66:45:d1:20:3e:3e:43:86:76:8e:56:fe:
31:ff:e6:3e:a8:c6:81:4d:2b:5e:2c:a4:ca:a3:43:
8f:8b:a4:32:3d:95:05:a9:85:43:72:b8:3d:7a:3d:
5e:d5:fc:e2:e6:8d:7d:57:ad:f4:0e:1c:a4:d0:59:
72:16:0c:5d:58:49:65:56:5c:19:10:33:f0:58:5d:
44:cd:50:4e:08:d4:82:ad:cb:90:93:6d:18:5a:6d:
a8:6c:3d:f1:db:5f:e5:3b:69:bc:8a:8e:ab:08:fd:
5e:89:3a:2e:8e:8e:ad:ec:83:b5:f5:8f:36:3f:2a:
c1:38:d3:c0:52:0d:db:4d:30:3b:b1:b1:56:2f:8f:
7d:96:31:5f:5a:36:b6:33:84:34:c7:78:0f:24:da:
91:f9:00:df:4d:05:d8:6d:e0:ca:35:ca:73:3a:17:
68:48:1f:7c:5c:ea:af:26:68:b0:9d:53:6a:08:21:
19:ec:e7:6c:f8:00:30:b1:ad:10:64:56:af:70:78:
ac:a9:cb:df:f1:a7:18:61:59:ce:3e:e3:4e:05:1e:
35:cc:1a:af:98:92:78:9c:2d:9a:5e:78:29:a5:58:
1a:a0:40:cc:28:21:3e:48:23:c7:4f:9a:d4:a2:10:
6b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:65:4E:01:20:39:32:6E:13:D3:CD:9E:F5:8D:A9:EF:07:77:22:77
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136225
sbgp-ipAddrBlock: critical
IPv4:
45.120.196.0/22
103.84.52.0/22
IPv6:
2400:9ac0::/32
Signature Algorithm: sha256WithRSAEncryption
03:5e:78:24:d4:5e:82:e0:ff:ea:e8:e6:98:b5:40:5f:84:e7:
3b:b0:c8:c6:c5:2c:2e:7e:dd:5a:c7:2a:43:71:0e:65:e9:32:
9c:d4:c4:97:67:eb:ea:2f:c4:2b:ba:71:b9:9c:a6:34:83:c1:
5d:9f:85:1f:bf:f5:64:1f:66:e3:23:5b:29:7f:c3:b5:29:22:
35:b6:a3:50:ce:f5:0e:d8:6b:6c:24:0b:b7:39:a6:3e:54:e2:
f7:1a:42:d8:80:64:29:ed:3e:f9:cd:e1:df:96:18:87:4f:78:
40:42:46:8e:cd:b2:92:79:f0:9d:19:40:8a:e9:44:36:6d:de:
4f:e0:8e:ec:79:b6:d6:cf:24:95:79:dd:bd:54:8c:25:9a:18:
6a:c3:e6:35:e0:17:9b:e8:7e:72:d5:18:88:91:c6:04:c1:62:
6b:6a:9c:f7:f6:8f:96:7f:84:14:5f:b1:f5:9d:c9:6b:07:29:
72:aa:0d:a8:bf:51:f7:94:48:5c:fb:92:39:d4:e2:f0:b5:45:
e4:5e:8f:83:7a:0f:c9:b4:85:a7:91:22:fb:db:ca:67:9c:d0:
0d:c0:8e:7e:ea:2e:7d:35:3f:f3:67:fd:27:76:c2:99:dc:31:
1c:99:2e:2a:34:ce:ae:67:e3:3c:e3:b9:f0:e4:d3:9f:f1:9f:
37:19:da:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:13 2026 by rpki-client