Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer
File: lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer (raw, json)
Hash identifier: b1ziXsUvc5B5oCNWg/2fYU+d9/dbqRatuVngzxj5DSM=
Subject key identifier: 96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A580
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 21 Mar 2026 01:31:57 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 58810
IP: 43.225.40.0/22
IP: 103.16.120.0/22
IP: 139.5.184.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173440 (0x2a580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 21 01:31:57 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91C6A87, serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:22:c5:74:b0:fb:49:1a:8d:8a:8a:a4:ab:
ee:4c:17:4c:6d:af:f2:bf:a4:72:32:19:17:4b:44:
6f:f7:a3:f4:63:2b:49:50:6f:47:0f:bc:84:80:93:
3a:a2:e4:44:dd:c6:14:9b:84:17:1d:22:52:3c:e2:
04:0a:a9:b9:6b:5c:e5:ee:3c:14:9e:f9:db:e2:ae:
21:a1:79:c5:4c:e2:e6:eb:ca:01:e8:a0:d7:5f:3d:
8a:90:7c:b7:c8:e6:5a:bd:ed:ce:38:14:07:4e:00:
9f:c1:8e:ea:63:c0:79:eb:c1:19:d5:d7:47:3f:66:
92:b3:51:f7:ed:a1:80:e5:bf:b5:5c:8c:73:c5:f1:
fd:05:2b:57:34:34:67:17:cf:04:15:9e:43:09:fd:
41:00:78:4c:ad:1a:a9:51:f5:e9:ec:e1:94:3e:93:
77:8d:5d:e3:a1:46:66:ab:4a:74:0e:8f:4e:97:5a:
a2:41:5e:e5:96:43:18:c7:32:94:95:f2:90:9e:7e:
22:c0:46:ed:cb:c6:f2:52:8d:66:de:7b:3a:ff:10:
ec:b9:37:ac:90:b9:1f:5d:f9:56:fd:08:d2:9e:5a:
a6:ce:c9:c2:98:74:b2:c4:76:3f:f6:6d:08:a6:8d:
89:48:05:f1:b9:6b:72:f9:ff:0e:0a:b6:e3:0b:7e:
f7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58810
sbgp-ipAddrBlock: critical
IPv4:
43.225.40.0/22
103.16.120.0/22
139.5.184.0/22
Signature Algorithm: sha256WithRSAEncryption
53:ad:cd:32:e7:1c:c7:d7:6c:b9:7f:4d:aa:64:86:7c:ad:d3:
fe:19:d1:dc:a6:bc:3c:0f:11:d1:aa:8a:06:32:bd:b4:7e:68:
ac:94:65:24:40:2c:b3:6f:f3:e3:3f:3c:d7:d4:14:86:b6:25:
a2:c1:fc:40:66:31:e7:8f:7c:2e:66:16:b3:7a:99:f0:80:12:
7c:ac:f4:35:73:5f:04:39:8f:74:5d:44:1b:49:7b:2b:92:65:
3b:c2:1b:18:ee:95:a8:62:e3:d4:31:b9:fc:10:c3:b3:50:3a:
60:7f:24:e4:71:0b:ec:50:75:dd:d0:51:3d:75:54:de:c7:fa:
b8:a7:92:38:22:63:da:fb:c3:ee:97:bb:db:02:fe:57:ac:89:
fe:f9:1b:3f:70:bd:3f:c1:51:8c:97:1a:ee:1f:77:af:81:04:
4e:b1:cb:7f:62:9f:49:36:11:e5:be:95:bf:48:36:9d:a8:8b:
e1:18:e0:61:56:fc:07:aa:ed:12:df:ed:59:54:f7:fb:58:f7:
94:6a:c3:99:36:73:e5:e1:a2:4f:d3:36:d8:c3:a1:ef:3d:8a:
bf:7f:4d:ac:db:90:c3:12:83:37:65:c7:f7:59:37:64:81:81:
4d:d1:35:29:21:85:7a:01:7c:3c:ee:be:12:e4:49:e5:9b:6d:
fc:cb:fc:06
-----BEGIN CERTIFICATE-----
MIIGJjCCBQ6gAwIBAgIDAqWAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDMyMTAxMzE1N1oXDTI3MDUwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzZBODcxMTAvBgNVBAUTKDk2QzFCQzk4N0FENjY0MzkxM0Y2NUUw
NUQxQTY2M0Y2NEM0QUUxQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2fiLFdLD7SRqNioqkq+5MF0xtr/K/pHIyGRdLRG/3o/RjK0lQb0cPvISAkzqi
5ETdxhSbhBcdIlI84gQKqblrXOXuPBSe+dviriGhecVM4ubrygHooNdfPYqQfLfI
5lq97c44FAdOAJ/BjupjwHnrwRnV10c/ZpKzUfftoYDlv7VcjHPF8f0FK1c0NGcX
zwQVnkMJ/UEAeEytGqlR9ens4ZQ+k3eNXeOhRmarSnQOj06XWqJBXuWWQxjHMpSV
8pCefiLARu3LxvJSjWbeezr/EOy5N6yQuR9d+Vb9CNKeWqbOycKYdLLEdj/2bQim
jYlIBfG5a3L5/w4KtuMLfvdzAgMBAAGjggMbMIIDFzAdBgNVHQ4EFgQUlsG8mHrW
ZDkT9l4F0aZj9kxK4bYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM2QTg3L0JFMDYyOEMyMjRDNTExRjE5QTQyMEVFQkE1ODMzNzczLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDNkE4Ny9CRTA2MjhDMjI0QzUxMUYxOUE0MjBFRUJBNTgzMzc3My9sc0c4bUhy
V1pEa1Q5bDRGMGFaajlreEs0YlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAOW6MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCK+EoAwQCZxB4
AwQCiwW4MA0GCSqGSIb3DQEBCwUAA4IBAQBTrc0y5xzH12y5f02qZIZ8rdP+GdHc
prw8DxHRqooGMr20fmislGUkQCyzb/PjPzzX1BSGtiWiwfxAZjHnj3wuZhazepnw
gBJ8rPQ1c18EOY90XUQbSXsrkmU7whsY7pWoYuPUMbn8EMOzUDpgfyTkcQvsUHXd
0FE9dVTex/q4p5I4ImPa+8Pul7vbAv5XrIn++Rs/cL0/wVGMlxruH3evgQROsct/
Yp9JNhHlvpW/SDadqIvhGOBhVvwHqu0S3+1ZVPf7WPeUasOZNnPl4aJP0zbYw6Hv
PYq/f02s25DDEoM3Zcf3WTdkgYFN0TUpIYV6AXw87r4S5Enlm238y/wG
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:10 2026 by rpki-client