Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer
File: CO-lQmZek61vuSE1pf1ZJF_V-uM.cer (raw, json)
Hash identifier: xUWrHXRrHG9vHh5BYbZ3AXuSeBT4Rxj1PMydt7755zQ=
Subject key identifier: 08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0294D3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:21:43 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 133197
IP: 103.255.31.0/24
IP: 2001:df1:6800::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169171 (0x294d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:21:43 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91C8AF2, serialNumber=08EFA542665E93AD6FB92135A5FD59245FD5FAE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:bc:86:18:c7:cf:cf:0e:67:0f:47:d0:a6:
75:4c:00:13:d8:1e:a6:1d:91:f4:a0:7b:ac:8f:44:
99:ea:2d:fd:95:45:8d:22:05:47:66:78:52:c6:da:
80:21:a2:b6:ce:6b:21:10:fa:9b:d3:8c:ec:c4:a4:
03:d3:67:2f:98:5a:b7:f1:2f:d7:47:7b:2d:79:6a:
ee:32:32:cb:50:d7:4b:bf:99:ec:41:89:ea:a0:db:
2e:a6:03:28:a5:ff:7c:60:f7:8c:5d:73:7d:5b:f2:
bf:cc:55:9c:23:ed:c2:62:80:7d:18:bc:36:b4:69:
7d:c7:23:82:62:f4:7d:8c:a7:0b:05:aa:27:75:ce:
da:9b:24:ff:fc:b5:eb:af:47:e5:fc:e3:a0:a8:3b:
40:8b:67:48:e4:c5:eb:34:c6:69:e1:8e:64:0a:80:
ee:be:4c:0b:1f:ae:a9:af:cb:5d:0c:18:6a:1a:fd:
3f:e4:8b:5d:57:85:96:94:dc:fe:02:c1:75:b6:92:
ba:91:de:33:bc:c5:c3:20:0f:be:0a:75:9f:c5:80:
ba:d6:fb:c7:d5:9b:98:27:67:16:66:a4:a4:41:e1:
20:93:9d:cf:19:6c:ff:9d:04:24:2b:7e:ff:24:54:
0c:ae:1e:7d:5f:e3:f0:f3:12:9a:0a:39:5b:91:70:
c0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133197
sbgp-ipAddrBlock: critical
IPv4:
103.255.31.0/24
IPv6:
2001:df1:6800::/48
Signature Algorithm: sha256WithRSAEncryption
40:3b:b9:b6:c3:32:20:d3:20:53:9e:84:cd:c2:d3:7e:48:fa:
7f:cf:76:f0:79:f2:5d:0d:b9:ec:89:d0:0e:07:8e:f1:9a:96:
27:9e:04:3a:d0:89:d1:6e:53:cf:3e:3d:e2:a9:a7:b7:4e:35:
6a:ab:83:76:04:ea:84:07:65:73:8a:73:7d:85:28:23:77:af:
60:d0:71:49:7f:3a:2d:73:be:1e:68:dd:2a:75:e5:7a:ca:b1:
19:4b:e1:f4:4f:46:aa:01:19:c5:71:f8:86:44:d2:96:c5:77:
21:aa:12:5f:b7:fd:89:24:b0:cf:83:25:91:41:b4:10:92:01:
2b:81:ec:be:ea:d5:ee:90:98:21:60:f0:ea:08:c4:e7:a3:58:
6c:03:3d:7c:ca:e2:8f:a7:40:20:98:02:9f:fe:95:3f:19:4c:
76:5e:2d:18:c4:3d:9e:dc:92:16:b9:3b:f2:e3:b8:eb:ef:ad:
72:2f:32:4a:b8:c5:25:88:26:c1:b8:8e:cd:e4:dc:cc:41:02:
23:18:41:81:0b:37:b7:0e:b9:b8:28:83:58:9c:5c:da:4e:ee:
2e:a7:38:db:2b:9f:66:8c:c6:8c:b6:26:da:7d:78:80:e3:8e:
fa:95:b1:44:08:c3:9b:68:84:8c:fd:ee:e1:de:81:4f:fe:aa:
c0:3f:37:f5
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDApTTMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzAzMjE0M1oXDTI3MDMzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzhBRjIxMTAvBgNVBAUTKDA4RUZBNTQyNjY1RTkzQUQ2RkI5MjEz
NUE1RkQ1OTI0NUZENUZBRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDFYbyGGMfPzw5nD0fQpnVMABPYHqYdkfSge6yPRJnqLf2VRY0iBUdmeFLG2oAh
orbOayEQ+pvTjOzEpAPTZy+YWrfxL9dHey15au4yMstQ10u/mexBieqg2y6mAyil
/3xg94xdc31b8r/MVZwj7cJigH0YvDa0aX3HI4Ji9H2MpwsFqid1ztqbJP/8teuv
R+X846CoO0CLZ0jkxes0xmnhjmQKgO6+TAsfrqmvy10MGGoa/T/ki11XhZaU3P4C
wXW2krqR3jO8xcMgD74KdZ/FgLrW+8fVm5gnZxZmpKRB4SCTnc8ZbP+dBCQrfv8k
VAyuHn1f4/DzEpoKOVuRcMArAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUCO+lQmZe
k61vuSE1pf1ZJF/V+uMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM4QUYyL0M3RTlGNDNBOTEyNjExRUQ5QUU2NTI3N0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDOEFGMi9DN0U5RjQzQTkxMjYxMUVEOUFFNjUyNzdDNEY5QUUwMi9DTy1sUW1a
ZWs2MXZ1U0UxcGYxWkpGX1YtdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAghNMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ/8fMA8EAgAC
MAkDBwAgAQ3xaAAwDQYJKoZIhvcNAQELBQADggEBAEA7ubbDMiDTIFOehM3C035I
+n/PdvB58l0NueyJ0A4HjvGalieeBDrQidFuU88+PeKpp7dONWqrg3YE6oQHZXOK
c32FKCN3r2DQcUl/Oi1zvh5o3Sp15XrKsRlL4fRPRqoBGcVx+IZE0pbFdyGqEl+3
/YkksM+DJZFBtBCSASuB7L7q1e6QmCFg8OoIxOejWGwDPXzK4o+nQCCYAp/+lT8Z
THZeLRjEPZ7ckha5O/LjuOvvrXIvMkq4xSWIJsG4js3k3MxBAiMYQYELN7cOubgo
g1icXNpO7i6nONsrn2aMxoy2Jtp9eIDjjvqVsUQIw5tohIz97uHegU/+qsA/N/U=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:30 2026 by rpki-client