Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer
File: cRYXAC2fDJ62W07dYfehyR_NuD4.cer (raw, json)
Hash identifier: 9rgZPMli82rujbmF/kEDF80vQuqNXnOAZHRYovTbr50=
Subject key identifier: 71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C6FE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 23 Jul 2026 14:16:53 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 134350
IP: 45.120.204.0/22
IP: 103.61.20.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 18:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182014 (0x2c6fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 23 14:16:53 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A919C6E7, serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:a8:aa:14:54:f9:4f:96:48:42:fc:7a:6a:
4b:08:da:51:6e:4f:34:99:03:2e:3b:68:64:f3:0f:
d0:a3:39:f3:86:81:ef:a9:55:a1:7e:87:b7:07:a7:
a7:b8:ff:3b:0a:ef:ca:5b:67:79:af:9b:74:e6:70:
05:9e:68:ea:54:52:d8:af:f2:24:c1:3d:bc:0a:1b:
6d:ad:99:fc:fc:08:8c:70:32:b4:d2:ac:b5:8a:7a:
dc:49:4d:ef:36:3e:40:14:fd:30:15:4d:dc:c6:2a:
64:02:8a:19:a3:11:a2:a6:6d:3a:08:c5:96:3d:88:
83:76:46:d2:52:88:98:63:cd:ae:8b:a3:75:4d:43:
ed:5a:1b:ad:85:3b:dd:d1:36:9e:78:fb:c6:30:87:
61:e7:03:b3:46:48:46:8a:dd:54:fa:17:d1:c7:9f:
a3:be:12:8a:73:b2:97:e2:be:21:7a:fc:29:74:ee:
43:f4:17:62:2d:0b:b5:57:5c:bd:5b:62:9e:34:1b:
f2:07:7b:d2:7e:de:f5:ec:a3:59:b9:3d:58:fd:1d:
0d:1c:83:42:ea:4e:94:d1:c4:69:5a:2e:90:a3:eb:
6a:7f:c8:49:bb:66:7b:e0:41:5f:f8:0b:cc:c5:b3:
5c:c2:5a:17:3d:c9:c5:d6:41:c1:c6:34:80:c4:2b:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134350
sbgp-ipAddrBlock: critical
IPv4:
45.120.204.0/22
103.61.20.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:12:f0:cd:c2:49:90:6c:46:c9:c5:46:34:f2:08:2f:54:6b:
c4:ac:e2:a2:72:30:50:f5:27:9c:e8:3c:82:7e:b1:ed:5e:7a:
2a:63:ae:a1:1d:bf:65:fe:94:49:35:3f:83:a0:0c:20:65:c6:
a7:89:bf:a4:48:46:19:bd:d2:4d:3c:1c:f4:20:b8:d8:e6:ec:
25:7b:fc:1c:9f:69:16:ea:20:0a:11:87:2b:9c:9e:7f:17:6e:
95:cd:6d:89:ed:99:ea:32:6a:15:38:89:cf:df:e9:aa:bb:8a:
af:2b:7f:00:7c:13:7c:78:ca:e0:64:72:65:7b:cd:2d:ad:51:
79:72:f5:30:1c:81:27:e3:ea:75:d1:ad:cf:46:c2:c3:a1:ad:
e5:7d:bf:a7:4d:9d:09:0e:42:f1:e8:82:f8:9f:38:94:ec:48:
52:8d:84:ac:f6:68:3c:ad:6a:b6:b9:5a:af:f3:43:0c:81:43:
3e:af:df:4b:b3:2e:e6:c8:a0:18:fa:b9:b2:bf:81:31:f6:8d:
fb:b8:d8:fb:6a:6c:2f:c5:42:d6:04:c5:ae:e2:6c:19:16:94:
ba:c1:80:d8:70:b6:59:f8:2b:d7:81:50:4a:4a:24:5e:ff:38:
14:0d:0c:dd:1c:3f:2c:88:4f:dc:35:e7:d4:36:06:11:d8:c2:
68:db:df:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:23 2026 by rpki-client