Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer
File: XOvYaFsXSV2z4edFmXn-hPBDg_I.cer (raw, json)
Hash identifier: T8GjOvkkm7SV1QEr2YiwOJhI8weJzULszJ5Z1A00zVk=
Subject key identifier: 5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029F53
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:10:35 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 148976
IP: 103.175.34.0/23
IP: 2400:9de0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171859 (0x29f53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:10:35 2026 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A917C716, serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:fd:14:e5:ad:c7:55:bb:44:f3:e7:a8:ef:
14:b6:35:f2:61:21:8d:16:ae:cd:44:b0:04:02:aa:
b1:3a:0e:a0:9d:0c:0b:eb:ca:3c:d0:0e:77:4b:32:
59:a4:d4:b8:b3:d2:f0:cb:1b:78:03:e0:28:ac:4d:
c5:a8:48:3d:6f:af:e9:c9:3b:c8:e8:5b:fe:9c:c5:
54:8e:1f:a8:13:92:6d:2a:76:82:5d:d4:88:95:90:
4b:87:0d:eb:77:bc:d1:d3:3e:01:36:2a:b8:5e:9d:
2f:4d:1f:8b:44:1c:96:95:99:ca:bb:da:d3:f0:c3:
d4:54:77:06:2c:01:3b:c3:4c:8c:a3:40:98:5b:77:
3d:0e:98:df:46:f6:94:f6:7f:4c:f9:14:41:26:50:
51:34:bc:2e:5b:c4:57:80:46:71:e4:2e:17:f1:d8:
29:7a:90:9d:a5:26:db:65:9c:f1:e7:f1:d9:05:a0:
25:71:fa:7a:27:2e:eb:e7:6e:4e:8f:6b:a2:8e:a1:
6a:76:11:b1:65:85:e4:29:da:7c:38:b8:8c:e1:59:
8c:7e:0d:ba:24:61:92:94:e3:13:1f:7a:37:12:67:
c3:43:94:1a:a0:5c:2c:7f:43:a2:83:da:ea:b4:ad:
97:2b:b3:61:a2:7a:16:d7:3a:20:5d:58:be:ed:c1:
51:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
148976
sbgp-ipAddrBlock: critical
IPv4:
103.175.34.0/23
IPv6:
2400:9de0::/32
Signature Algorithm: sha256WithRSAEncryption
7f:6d:ad:82:df:6a:c1:29:42:1b:1e:67:e5:e2:64:6f:44:33:
a7:65:10:1d:64:2a:99:a1:89:1a:af:82:47:3c:3d:c1:9f:63:
de:cb:72:4b:56:b6:41:97:0e:3f:b2:25:f8:bd:c9:5e:97:9f:
a2:ee:ac:3d:01:09:27:1b:de:72:64:47:b3:f3:03:87:9b:85:
5d:83:8c:68:b1:ed:09:dd:c8:00:33:3e:d2:5c:6f:57:5e:58:
05:0d:a3:6d:f1:0e:87:d8:3d:0d:10:a3:3b:72:ee:ea:68:5f:
57:8c:89:0a:21:df:3a:03:1e:c9:4b:8d:04:1b:14:f2:72:b8:
57:dc:1b:22:98:5d:07:d4:87:86:91:ac:ce:43:d2:26:ab:cc:
bc:13:9d:87:12:14:35:57:63:00:1b:87:da:bd:be:06:98:48:
8c:e0:27:01:17:08:e8:89:5f:fb:eb:3e:51:b8:c5:c3:46:71:
7b:8f:c9:0b:fc:1d:54:2c:c6:aa:ae:ce:2d:c1:88:ae:73:33:
ce:5d:a2:bd:bd:16:99:93:23:1c:0b:1e:62:c7:50:bf:b7:ea:
10:ba:c6:0f:d3:8e:e4:44:13:33:09:6e:53:35:36:6d:a3:15:
6f:27:c8:57:fb:c3:ae:4d:95:21:bf:05:00:9a:cf:7b:7c:e1:
ea:4b:81:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:23:28 2026 by rpki-client