Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer
File: Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer (raw, json)
Hash identifier: DIIqIIqyjII+0srQpCh8OKwLLoE7W7e0n0pmNJLfaKs=
Subject key identifier: 57:2E:76:0D:BC:E6:D6:55:53:09:8B:01:7E:FC:32:EC:B1:CE:CA:E1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02969D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:30:18 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 149168
IP: 103.177.186.0/23
IP: 2001:df0:28c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169629 (0x2969d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:30:18 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91E331D, serialNumber=572E760DBCE6D65553098B017EFC32ECB1CECAE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:df:31:2b:ba:f4:e3:e6:06:1a:da:5f:8d:07:
18:01:3c:41:ca:d6:aa:68:4b:c1:74:94:0d:ca:40:
35:38:85:bc:98:19:8b:5c:cb:d0:5b:b1:40:5a:91:
43:e6:3f:9b:5b:a0:e1:0c:39:f6:0b:fc:ae:11:1e:
b7:37:7c:3b:c1:f7:9a:e1:75:6c:65:50:d0:07:a4:
e9:e9:5e:e3:8f:be:d0:b6:02:99:05:10:a2:66:41:
02:de:ad:0b:8d:79:f5:ce:cf:50:a7:c2:f7:ba:54:
1f:a1:d8:4d:c5:b3:ac:ec:07:a8:c8:c2:5a:94:3c:
79:58:e8:2b:8f:de:4b:0b:ed:02:71:55:13:6a:d7:
80:42:65:2f:30:ce:e9:c6:20:94:a2:32:5d:27:60:
74:5c:78:09:c8:d3:f8:19:e3:90:82:7e:ae:b0:62:
d1:13:f2:d4:ed:5c:cf:4b:41:be:3b:54:24:ba:4a:
58:1c:0a:39:37:c7:12:9c:23:59:58:4c:c4:c5:38:
0e:7f:5b:95:55:1f:3e:69:40:41:0e:ae:09:8c:4e:
6a:6e:e4:1d:e5:32:91:fa:83:d1:4c:4b:24:2e:a9:
59:f1:a9:ef:e9:b4:d0:98:fa:11:b1:87:07:f2:11:
d8:f6:70:b7:86:bd:dc:ba:e5:41:b5:9d:44:90:13:
2c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2E:76:0D:BC:E6:D6:55:53:09:8B:01:7E:FC:32:EC:B1:CE:CA:E1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149168
sbgp-ipAddrBlock: critical
IPv4:
103.177.186.0/23
IPv6:
2001:df0:28c0::/48
Signature Algorithm: sha256WithRSAEncryption
94:f3:5a:d5:a6:43:71:24:f3:8f:5f:21:07:28:6e:d4:cf:cb:
f9:90:fb:23:dd:42:41:5a:95:87:39:68:a8:c2:2e:3a:da:1f:
e0:77:29:8e:08:08:e8:40:f6:fe:64:6b:96:1e:c4:8d:3f:0d:
15:f8:d8:77:09:63:54:45:5f:12:f8:54:77:6d:b8:4d:10:12:
3e:b9:b3:57:62:e7:32:67:18:8a:59:90:3d:a3:ec:f6:fe:90:
b0:2d:df:73:d9:d7:28:bc:19:3c:e4:6d:58:90:a4:27:3b:0f:
87:00:d5:28:b2:e4:2d:17:c1:37:23:63:25:58:3a:51:a4:0d:
0b:41:a8:2d:f8:7c:81:e8:a5:02:22:d5:e6:2d:06:67:68:86:
54:ba:0e:c9:3c:11:6e:a1:f2:5e:43:a5:62:98:a9:0e:fe:7b:
09:71:fa:20:d2:18:d1:c7:09:67:80:ef:78:1c:9b:43:d3:cd:
38:e5:ef:c9:11:83:52:d9:a1:fc:92:90:64:45:e1:75:d0:68:
70:3d:24:92:a7:99:bf:d4:3a:47:67:3e:6a:1a:23:98:3c:5b:
af:05:ce:d0:6c:3e:2b:ff:74:1c:fc:7e:52:f8:ba:1e:14:dc:
d4:47:13:72:1e:a6:74:d6:8c:ae:15:2b:27:e5:d1:b6:25:fd:
61:e7:39:ce
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:30:56 2026 by rpki-client