Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
File: 07sK_xlZ4CkmxzdUiny-QQ25CWs.cer (raw, json)
Hash identifier: Tjdqf6ybPShI1/7xViSLm6Lrx2Fw/SZjxAutsgIru1g=
Subject key identifier: D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0291D0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:06:34 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 137218
IP: 103.56.2.0/23
IP: 2400:cd20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168400 (0x291d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:06:34 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9155A79, serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:62:bf:62:15:d0:eb:6b:76:69:12:10:eb:f2:
13:c3:66:68:0a:3a:18:ac:ba:5f:f6:4c:d3:92:5f:
13:6f:28:97:f6:c2:3b:67:2b:43:45:ef:29:79:a6:
f0:a0:63:f9:4e:79:a3:32:71:91:c8:54:0d:a9:af:
25:9e:53:69:4e:9b:31:51:e2:74:8b:bb:79:21:55:
f5:42:60:c2:69:1c:c6:f6:ea:c8:6e:1e:de:96:79:
f4:bf:ab:72:a4:46:1c:f1:3c:21:78:c2:0b:31:70:
8b:14:77:62:6c:a2:42:44:34:1c:57:92:51:84:c1:
eb:db:52:e4:1e:99:82:78:1d:85:58:cf:da:f3:3d:
8f:1b:8a:36:4f:c2:39:24:6b:fa:7c:f8:89:f5:24:
bf:58:33:19:e2:14:77:1e:99:ca:47:94:c8:39:8d:
2f:34:5e:51:f8:4f:8f:77:f5:20:e3:97:21:51:71:
f8:27:c7:60:23:0c:6e:fa:bd:c2:7c:d3:b3:3e:8f:
0d:89:58:21:84:a6:d4:ca:28:db:ca:99:6d:64:92:
5c:7d:73:4e:24:e3:f3:9e:4c:4a:5c:ca:72:11:65:
71:97:31:ef:ed:17:24:42:1f:cc:f7:ae:d5:93:ed:
d7:51:22:90:25:dc:c0:be:eb:ba:67:64:6e:51:d4:
0e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137218
sbgp-ipAddrBlock: critical
IPv4:
103.56.2.0/23
IPv6:
2400:cd20::/32
Signature Algorithm: sha256WithRSAEncryption
8c:a3:f1:95:96:cc:56:24:65:68:9b:cf:05:7a:28:1e:ba:b9:
9d:39:7c:bc:4c:65:5b:f0:ed:49:f3:80:f9:52:8e:cc:3b:c1:
f1:e4:4b:76:1d:6b:3f:db:63:34:df:c1:9c:5f:76:4e:ca:15:
1b:6a:b4:35:d5:3f:60:e9:5e:c1:a9:0a:b3:2a:8f:e7:8f:cb:
d6:f7:bd:ef:a7:71:c6:ae:66:f2:0c:94:72:e9:00:95:65:9b:
2e:14:e3:85:e9:5f:42:8f:8e:9b:07:b9:ab:ee:a4:6f:db:26:
d4:69:50:6f:ca:ea:59:53:89:a5:6c:12:cc:fb:f4:08:f8:1a:
5e:15:95:18:9a:3c:35:8f:30:f4:ee:05:52:f1:ee:c0:0d:fd:
29:b2:8f:57:cb:fa:cc:4f:3c:dd:7a:eb:39:2f:ed:86:f7:82:
fe:fe:13:36:e3:2a:ed:0b:e5:1d:1e:d8:aa:f5:4c:38:b7:f8:
8c:b0:f5:09:18:75:b3:07:8c:7a:37:32:5b:1c:93:69:57:52:
ef:07:d6:09:33:e7:7d:e0:df:d4:98:79:a2:e5:ba:e3:f9:c2:
64:77:af:d6:31:cb:7c:2e:8d:0c:c1:02:be:36:01:ca:5a:43:
31:49:e7:46:19:dd:7f:5e:6e:be:89:34:13:de:2f:3a:82:1f:
d8:e4:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:30 2026 by rpki-client