Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer
File: aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer (raw, json)
Hash identifier: Z+qp9PW/UUFRczND9opb6qvXDbK/SKNfgqv4Tsi08ko=
Subject key identifier: 68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A2E7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 06 Mar 2026 13:26:10 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 23898
AS: 137439
IP: 103.108.216.0/23
IP: 2001:df4:1d00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172775 (0x2a2e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 6 13:26:10 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9174125, serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:be:94:b0:2b:bf:d6:f3:71:3d:69:83:0e:
0e:42:a0:93:82:e5:39:7c:02:84:a4:95:a8:d5:af:
64:cf:99:5b:9a:17:81:2d:38:40:85:a7:ef:d0:f3:
3e:9d:12:a0:a0:df:5f:ab:fc:33:61:0c:9c:d2:b9:
43:d3:e0:0d:99:fa:c9:c6:99:1b:f0:ea:f9:a7:0b:
42:67:04:cd:d5:0c:13:70:2d:21:9b:89:4c:db:99:
01:47:75:05:9f:d4:84:26:93:58:12:6c:6c:d1:7a:
95:4e:60:58:49:d5:24:2f:d0:24:de:26:08:19:fd:
19:c7:8b:29:13:fd:96:a6:0b:57:be:52:33:37:87:
c2:89:3a:e5:e4:60:db:50:7a:2d:40:b6:18:62:30:
d3:22:10:8d:28:47:6f:f9:86:fb:ad:eb:d5:82:4c:
38:06:39:b2:bd:31:d8:6a:7e:5a:e0:9f:e3:f5:e2:
cb:1e:26:8b:67:30:04:f4:75:d9:97:7f:e1:eb:0b:
9d:96:56:07:49:9c:93:fb:55:68:28:88:ea:94:a1:
43:0b:9d:df:f0:f2:12:b6:92:a2:c1:12:b1:16:e9:
2a:87:ef:92:b9:0e:a3:1a:16:e9:c0:05:54:cb:43:
73:67:f7:5d:c5:2a:12:a3:65:7b:4e:34:5d:9b:b6:
02:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23898
137439
sbgp-ipAddrBlock: critical
IPv4:
103.108.216.0/23
IPv6:
2001:df4:1d00::/48
Signature Algorithm: sha256WithRSAEncryption
19:b2:0f:93:25:71:69:40:fd:a4:e2:9b:42:e3:3b:86:1e:97:
70:fb:38:09:79:ad:fb:f9:a9:09:25:90:bc:9b:e7:ce:71:f7:
e7:47:0d:1d:aa:e8:fd:b1:ef:24:0d:88:bb:eb:51:2f:3a:d9:
ef:f4:f2:c6:45:bf:ff:60:73:e6:d8:e4:62:cb:cd:0f:6e:b8:
f4:a5:51:b0:68:0c:35:6c:03:e4:f1:a4:70:d7:ae:8a:df:d9:
7b:b4:29:a5:9a:68:4f:e7:de:37:02:2b:73:7a:90:d1:5e:6e:
29:ed:f4:07:fd:f1:28:9c:69:31:6e:e3:5a:4e:1d:9e:7d:9b:
95:52:35:5e:d5:2b:02:a9:ea:9b:b3:66:5a:a2:e8:2b:31:44:
0b:7f:f2:3b:bb:3e:cc:49:d8:78:88:b5:7a:33:16:b2:54:e6:
b7:78:fc:c0:02:26:7b:1a:45:c7:d9:92:b1:83:64:51:89:77:
f7:05:b3:0d:26:06:15:8e:21:03:04:a3:53:75:3b:43:f7:84:
80:b5:8a:c3:b6:a6:ec:dc:3a:b3:d1:77:bc:17:dd:f4:16:0b:
db:b4:c1:c3:cb:c8:d5:49:be:fc:0f:7e:fc:9b:de:54:da:a0:
a6:63:72:46:2c:d8:94:f2:88:6c:c3:fe:57:29:7c:2f:82:86:
2f:f0:6c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:20:38 2026 by rpki-client