Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mazcDOVaSyEFtBOmoQ28JJggYPI.cer
File: mazcDOVaSyEFtBOmoQ28JJggYPI.cer (raw, json)
Hash identifier: M9WkoQQ7reZU1VbxEAbfZx5kqOTW65bd1soVLzJnYG4=
Subject key identifier: 99:AC:DC:0C:E5:5A:4B:21:05:B4:13:A6:A1:0D:BC:24:98:20:60:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D77A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9123194/136AD29AB5DA11F183A624864811F970/mazcDOVaSyEFtBOmoQ28JJggYPI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9123194/136AD29AB5DA11F183A624864811F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 21 Sep 2026 16:32:49 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 136405
AS: 136407
AS: 137447
IP: 103.86.168.0/22
IP: 203.6.212.0/22
IP: 2400:c3c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186234 (0x2d77a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 21 16:32:49 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9123194, serialNumber=99ACDC0CE55A4B2105B413A6A10DBC24982060F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:83:48:f4:e1:04:e3:a1:f6:13:68:ae:13:
7c:9d:2a:f6:2c:74:45:77:cf:57:bc:86:39:6b:00:
df:bf:f0:cc:df:91:fe:23:a0:ad:f5:49:d8:1b:d6:
bc:18:13:47:51:f6:9f:c0:19:77:30:dd:28:76:61:
f2:88:6b:5a:77:37:97:ed:e9:ad:4a:79:57:23:30:
e3:d4:85:2b:7d:05:96:14:1f:f1:ba:72:92:72:91:
c7:54:14:6e:02:6d:ae:3c:1c:2c:64:0e:df:4f:b3:
17:4a:61:6e:d4:8e:ca:86:fa:75:50:c4:9a:63:e5:
ea:81:10:d6:97:c7:c1:24:6f:cb:c1:aa:a3:33:2e:
90:7c:9f:c3:68:dd:c2:fa:3d:de:9c:dc:01:4e:41:
61:79:c3:82:32:db:ab:04:a4:8a:05:5c:ad:61:93:
10:26:cb:ff:dd:a5:dc:9c:9e:fd:24:62:bb:38:1b:
0d:00:98:2a:e2:12:20:7b:33:fd:74:b4:d6:ef:17:
e8:e0:ca:55:44:eb:95:47:07:04:2a:80:db:4a:d6:
86:02:c9:4c:af:8c:25:77:74:9e:c3:fa:28:a5:2c:
57:f7:ea:71:ca:2c:8e:94:54:ba:89:8f:d0:30:fb:
99:eb:2c:3d:d6:4c:b6:d4:f2:fd:b8:43:75:d5:da:
ef:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AC:DC:0C:E5:5A:4B:21:05:B4:13:A6:A1:0D:BC:24:98:20:60:F2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9123194/136AD29AB5DA11F183A624864811F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9123194/136AD29AB5DA11F183A624864811F970/mazcDOVaSyEFtBOmoQ28JJggYPI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136405
136407
137447
sbgp-ipAddrBlock: critical
IPv4:
103.86.168.0/22
203.6.212.0/22
IPv6:
2400:c3c0::/32
Signature Algorithm: sha256WithRSAEncryption
06:56:ab:0e:74:fa:c6:a2:c8:ff:a2:6b:e6:ad:f0:6e:0d:d4:
c0:3a:3e:28:b6:d2:9a:44:04:90:ad:a5:b0:8e:95:ba:0b:4f:
7f:89:b8:5c:d5:d8:55:e6:9c:6f:53:e7:2e:92:86:4c:8d:80:
90:8f:37:90:dc:b8:f4:79:7e:9a:b5:7e:86:b4:66:da:0c:ec:
44:ec:5c:45:a1:01:4b:68:b3:bf:5e:fe:51:84:53:24:e5:96:
8e:66:c6:1d:cd:41:09:cf:d2:d9:a5:29:0f:74:45:b2:2f:88:
44:3a:51:1a:91:9c:25:c2:2a:d8:d7:10:53:3a:7a:f4:b0:58:
ee:4e:a0:95:db:d0:be:36:72:f6:5c:5f:00:f9:75:d2:58:38:
e8:10:6c:14:46:2a:f7:f8:1e:4c:73:ed:fc:d7:14:f5:96:8a:
71:2b:cb:f0:97:40:c0:29:8d:75:89:c3:0f:2b:08:e8:f7:fa:
32:55:5f:86:88:17:d8:e8:ac:01:cc:a4:86:85:ab:be:9d:3a:
14:ab:79:06:af:fa:fe:91:f6:44:57:10:0a:dd:80:e7:25:00:
d6:a7:62:8b:f4:9e:9c:32:54:7f:c9:3a:de:1e:2a:0c:40:61:
d4:cf:0f:d7:ad:15:17:4e:00:a0:73:9a:5c:bb:24:d9:0f:11:
7b:f4:9f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:11:28 2026 by rpki-client