Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
File: 53BQiRv4knQyZQtwbyv-3ZKhEck.cer (raw, json)
Hash identifier: CTLpX87YHTBjJx5Veh0mKB7mU0WvoSN3dJgBpFSYr8w=
Subject key identifier: E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0299D9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:45:58 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 37976
AS: 140046
IP: 103.147.194.0/23
IP: 2001:df2:a280::/47
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170457 (0x299d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:45:58 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91F8ADF, serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7b:db:d5:f6:56:d2:3a:e3:ff:28:58:34:1b:
5b:b8:aa:72:79:49:45:1d:a4:b3:f0:0c:aa:ce:77:
63:62:fe:dd:a8:dc:54:82:68:87:7c:c4:f9:c3:fa:
4f:da:e8:49:5f:f1:24:66:ba:e9:34:0d:66:78:c4:
1f:7d:ae:c4:54:33:73:a5:93:f0:4b:90:ac:ee:b2:
a0:58:ac:29:5c:2f:e5:c0:19:30:31:32:61:f8:5f:
96:55:f7:03:18:07:6e:1b:22:36:2d:9b:b5:19:e0:
a2:c6:a8:84:c4:07:53:42:47:c6:e0:99:7d:3e:1a:
11:76:6c:a8:56:2e:b9:96:12:07:56:1a:03:8b:41:
b8:02:09:a3:c0:2a:a7:1f:14:d3:ec:89:e7:50:c5:
35:ad:29:60:9e:28:2f:3d:18:a5:19:c4:95:5b:85:
ac:6f:25:50:d8:e2:19:64:50:94:6f:5a:97:6c:25:
eb:24:2e:5c:77:78:b6:39:2f:d0:4c:8d:04:42:1e:
58:ab:30:70:63:ba:fb:7d:e7:1a:a7:bf:fb:7f:58:
96:3d:fd:bb:20:80:85:85:5c:e3:d7:d0:d5:f9:79:
17:4a:a2:c1:83:01:02:cf:c7:c5:4d:ba:35:d0:c0:
d8:b2:77:bd:4e:75:65:0d:50:e1:34:44:e7:e4:f8:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37976
140046
sbgp-ipAddrBlock: critical
IPv4:
103.147.194.0/23
IPv6:
2001:df2:a280::/47
Signature Algorithm: sha256WithRSAEncryption
4d:59:a3:a0:26:f2:6e:10:bd:ab:67:3e:ee:13:85:d2:6c:c2:
ef:da:3c:44:04:cb:83:4a:c3:f2:bb:14:44:82:b7:78:8f:53:
75:a7:d0:0b:9e:85:aa:81:a6:4b:50:60:94:d8:29:de:59:92:
73:55:25:5e:21:71:61:eb:35:ac:6f:42:68:5c:2e:93:8f:18:
e2:3d:a5:de:38:e6:a7:0b:ad:89:4c:c1:f5:98:e0:cf:3d:fb:
dd:21:64:bf:fa:1c:e2:f8:bb:8f:3c:f8:a5:df:20:8b:45:72:
50:94:37:07:f6:e5:94:49:1c:eb:b7:d9:14:99:44:07:2e:29:
e3:47:61:1a:3f:23:cd:ec:e1:2b:d6:8e:7c:7c:7f:b3:c4:d9:
3a:96:eb:a9:0e:3d:a1:94:62:7e:5f:15:cb:62:a2:92:b0:00:
46:d5:d4:6a:ad:81:52:d2:07:2c:34:52:34:88:ec:dd:60:6e:
5f:64:73:2d:95:07:11:26:2d:dd:d9:3c:eb:6e:a1:f3:6c:5f:
e1:a6:9d:17:6a:d8:8f:96:6b:8f:41:c9:2d:b5:49:85:f6:da:
36:13:fc:f1:72:59:82:de:dc:95:9f:66:63:37:9b:0e:2e:c5:
d2:96:fb:a3:4b:5b:cf:01:63:77:13:52:dc:15:59:a6:ca:6b:
49:9e:80:27
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIDApnZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzAzNDU1OFoXDTI3MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjhBREYxMTAvBgNVBAUTKEU3NzA1MDg5MUJGODkyNzQzMjY1MEI3
MDZGMkJGRUREOTJBMTExQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDfe9vV9lbSOuP/KFg0G1u4qnJ5SUUdpLPwDKrOd2Ni/t2o3FSCaId8xPnD+k/a
6Elf8SRmuuk0DWZ4xB99rsRUM3Olk/BLkKzusqBYrClcL+XAGTAxMmH4X5ZV9wMY
B24bIjYtm7UZ4KLGqITEB1NCR8bgmX0+GhF2bKhWLrmWEgdWGgOLQbgCCaPAKqcf
FNPsiedQxTWtKWCeKC89GKUZxJVbhaxvJVDY4hlkUJRvWpdsJeskLlx3eLY5L9BM
jQRCHlirMHBjuvt95xqnv/t/WJY9/bsggIWFXOPX0NX5eRdKosGDAQLPx8VNujXQ
wNiyd71OdWUNUOE0ROfk+DoRAgMBAAGjggMlMIIDITAdBgNVHQ4EFgQU53BQiRv4
knQyZQtwbyv+3ZKhEckwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY4QURGL0NERjQwNUMyRjA2ODExRURCQjk3OEUyREM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGOEFERi9DREY0MDVDMkYwNjgxMUVEQkI5NzhFMkRDNEY5QUUwMi81M0JRaVJ2
NGtuUXlaUXR3Ynl2LTNaS2hFY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAJRYAgMCIw4wMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAFnk8Iw
DwQCAAIwCQMHASABDfKigDANBgkqhkiG9w0BAQsFAAOCAQEATVmjoCbybhC9q2c+
7hOF0mzC79o8RATLg0rD8rsURIK3eI9TdafQC56FqoGmS1BglNgp3lmSc1UlXiFx
Yes1rG9CaFwuk48Y4j2l3jjmpwutiUzB9Zjgzz373SFkv/oc4vi7jzz4pd8gi0Vy
UJQ3B/bllEkc67fZFJlEBy4p40dhGj8jzezhK9aOfHx/s8TZOpbrqQ49oZRifl8V
y2KikrAARtXUaq2BUtIHLDRSNIjs3WBuX2RzLZUHESYt3dk8626h82xf4aadF2rY
j5Zrj0HJLbVJhfbaNhP88XJZgt7clZ9mYzebDi7F0pb7o0tbzwFjdxNS3BVZpspr
SZ6AJw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:53:32 2026 by rpki-client