Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer
File: 5LMs8qYR9wLf0JE-PqULT9YexXU.cer (raw, json)
Hash identifier: 9CFVi8SNe/xX5SnTeJgebTU6OdtzyxGzxVqwQmG5+Vg=
Subject key identifier: E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0296CA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:31:38 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 103.125.84.0/22
IP: 2403:ef40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169674 (0x296ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:31:38 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A914450B, serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8d:78:7a:51:37:7e:9d:bc:37:40:76:4e:ed:
61:8c:c1:e1:eb:8a:90:89:4e:2d:90:51:23:a5:da:
80:e6:cd:62:6d:9d:56:fb:9c:d4:71:a7:00:25:73:
c2:62:a9:fc:38:3f:91:22:e6:e7:30:f5:b4:f6:84:
47:6f:85:1e:23:08:8f:f9:74:20:38:32:32:82:35:
4b:f9:2f:98:48:38:89:a9:e3:fe:df:f2:82:47:85:
60:bb:34:f6:3c:9f:fb:da:b4:95:11:3c:19:e5:9d:
4a:64:22:78:d7:0e:89:d8:6a:bd:2c:63:0a:b8:d4:
23:25:f7:8f:63:8a:34:10:4e:3d:ef:20:7d:77:eb:
ff:2c:d0:ed:85:d8:93:e6:0b:5c:c7:cb:b5:3f:f2:
06:20:42:c7:e6:90:6f:1b:ca:8d:2d:10:88:c8:5f:
4a:31:2d:b6:09:d1:b6:17:21:54:e8:2b:81:0a:6d:
42:02:00:fe:ad:3f:b3:cd:07:25:34:f2:0f:e3:07:
3f:3c:6f:9e:39:4f:c8:57:00:bc:f2:0f:ff:f5:19:
4e:dc:a3:26:97:f5:4e:7b:a8:55:2b:cc:33:e2:ea:
90:2a:2d:45:fd:ee:41:1f:89:47:6d:4e:16:4d:0c:
e3:60:2c:ef:22:a0:f4:a5:a3:51:27:ab:7f:88:48:
7e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.84.0/22
IPv6:
2403:ef40::/32
Signature Algorithm: sha256WithRSAEncryption
9c:90:18:97:54:73:05:89:01:b6:3a:91:ec:c3:62:99:aa:93:
ed:ba:bf:7a:3b:c4:04:db:bf:a5:46:0c:99:d1:14:1e:0a:08:
eb:ca:65:e8:1e:02:e2:7a:4e:ec:b0:b3:7d:18:31:58:e0:61:
dd:27:af:ca:a7:68:f0:e6:c2:b2:bb:d8:45:4e:88:97:e9:bc:
ff:4f:4e:c7:26:b9:b0:ca:fb:d4:77:fe:49:6f:96:ce:9e:c1:
4d:c2:0b:dd:75:ff:ea:b3:e4:6f:bf:a0:02:88:88:1d:6a:49:
c9:eb:7a:16:d1:0d:7f:83:b0:d1:2b:eb:a9:83:de:66:b9:43:
ac:e8:5b:ae:34:23:8b:23:a2:40:d7:98:77:38:9f:57:f3:15:
55:6e:d7:1b:0d:a6:c1:31:2e:bc:31:8d:93:f7:96:01:26:ae:
36:ec:00:eb:b9:3a:ac:d7:8b:02:71:02:72:de:d2:ff:81:42:
a7:7e:5e:14:d5:1c:e3:ec:9a:85:44:05:f7:0f:1a:49:59:7f:
d2:18:76:1c:c4:ee:c4:de:07:86:cd:31:46:c0:d5:1d:c6:b0:
ff:38:fd:49:b7:94:f1:c0:86:a6:32:c7:4d:31:5f:f1:f0:a7:
48:65:c7:2b:7c:e3:2c:b5:40:d6:03:06:d9:c2:d3:40:6e:a5:
63:ad:a9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:29:19 2026 by rpki-client