
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer
File: gunGO3wseQh9WrEOid0oovfEnD4.cer (raw, json)
Hash identifier: qKu93suBP1oek5EJYUdg73hI7h/tqIYK6AA9VdCLR6k=
Subject key identifier: 82:E9:C6:3B:7C:2C:79:08:7D:5A:B1:0E:89:DD:28:A2:F7:C4:9C:3E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AE5B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 23 Apr 2026 04:22:49 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 152684
IP: 103.129.14.0/23
IP: 2001:df3:a9c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175707 (0x2ae5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 23 04:22:49 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A915308F, serialNumber=82E9C63B7C2C79087D5AB10E89DD28A2F7C49C3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c0:5c:ac:ad:4e:64:c1:36:a4:0a:93:8f:57:
6f:4d:a6:73:b7:d2:45:ef:06:4e:6f:78:48:58:a9:
11:9c:46:52:40:3e:85:45:09:d8:32:54:c6:30:89:
b1:a8:73:cb:0e:1a:7f:df:6b:0e:cf:57:fe:10:ee:
d9:96:ac:3b:00:f7:1c:ef:86:99:15:3b:85:0b:6a:
a9:a6:46:9e:bd:90:77:20:e0:f6:00:27:64:9c:cb:
be:17:a6:e0:e7:bf:19:94:60:7f:35:13:e4:84:a7:
6b:7f:f8:13:c0:21:bc:d8:95:6f:e4:3a:9f:28:be:
96:f2:7f:3f:a8:d6:c5:96:cc:b7:07:12:da:2c:e1:
79:9b:e8:dc:f3:7d:24:15:35:13:94:fc:3a:dc:a0:
b9:44:af:b1:8e:3e:b7:1f:d8:fe:b7:b1:56:b0:bc:
7f:9b:79:9a:22:41:13:2a:ab:22:6f:c5:3d:6e:e7:
69:a6:65:fb:72:63:89:65:f5:aa:18:08:2c:78:1d:
07:ac:30:2f:95:66:62:e5:75:97:3b:bd:b6:a7:94:
fa:c7:da:1f:08:33:72:d7:53:12:fe:b9:41:0f:80:
6f:09:15:9d:93:5b:5d:89:51:48:da:94:49:39:4b:
89:b8:d8:30:3c:f9:ce:25:4a:e6:90:49:73:73:31:
9a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E9:C6:3B:7C:2C:79:08:7D:5A:B1:0E:89:DD:28:A2:F7:C4:9C:3E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152684
sbgp-ipAddrBlock: critical
IPv4:
103.129.14.0/23
IPv6:
2001:df3:a9c0::/48
Signature Algorithm: sha256WithRSAEncryption
61:07:f2:ec:b7:ee:2f:11:7f:f7:da:a5:8a:0f:c1:07:7c:8e:
d1:dd:d2:1b:f4:16:65:d8:4b:c8:d2:f9:7d:9d:80:ca:66:46:
1d:57:58:73:0a:74:22:94:31:70:3d:1a:a1:4a:a0:2c:32:ab:
d9:79:f0:56:76:3f:34:ac:8b:e0:ea:ec:c9:5e:6f:3b:11:04:
52:dd:83:1c:4c:33:94:8a:10:3c:63:7e:72:55:6e:bf:79:61:
1e:e5:25:bf:76:64:f1:6a:91:12:0d:b1:7b:46:cf:90:fd:38:
4b:d2:0b:54:36:28:52:72:3a:30:c0:8b:33:41:fc:4b:21:b3:
5e:79:04:b4:f7:39:fd:71:fc:74:5c:ac:96:cc:dd:0a:c3:5e:
43:d4:94:93:e0:ed:38:37:e2:b8:24:03:f5:4a:18:b3:c3:40:
09:50:28:df:c0:c6:22:b6:a2:61:ed:61:42:19:c6:fc:3a:81:
e8:ec:6a:57:34:1b:a3:5c:6a:c6:8f:26:3b:08:b2:f0:2b:75:
6f:af:6f:39:54:4d:d8:34:7b:2b:5f:b9:2e:8e:fc:8a:b8:c3:
b8:84:a4:93:8e:0e:9c:5b:32:dc:5c:0f:19:b5:a6:3c:63:e2:
5a:4e:75:df:8d:c8:66:61:cb:c1:70:55:db:f8:21:4f:84:df:
6c:38:51:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 05:15:34 2026 by rpki-client