
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z8yoslZifZLRcDYUO_9qEKe22ew.cer
File: Z8yoslZifZLRcDYUO_9qEKe22ew.cer (raw, json)
Hash identifier: pEUNuKdIPyZ3DE2WHDMjHf3SXRvJ7gklX9WTm1dGQhU=
Subject key identifier: 67:CC:A8:B2:56:62:7D:92:D1:70:36:14:3B:FF:6A:10:A7:B6:D9:EC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CF55
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9121E1E/8C9DD9649F9611F1A0C006F54311F970/Z8yoslZifZLRcDYUO_9qEKe22ew.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9121E1E/8C9DD9649F9611F1A0C006F54311F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 24 Aug 2026 08:34:01 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 18356
IP: 103.60.185.0/24
IP: 202.8.78.0/23
IP: 2407:a500::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184149 (0x2cf55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 24 08:34:01 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A9121E1E, serialNumber=67CCA8B256627D92D17036143BFF6A10A7B6D9EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:31:b7:0b:a6:0f:26:25:a9:18:6c:f7:8e:
c2:15:60:8a:00:aa:19:33:ab:25:31:fb:7f:1f:f4:
63:c6:58:bd:cc:fa:db:73:93:e0:92:e4:5a:7f:d2:
e1:29:5e:0d:7e:fd:d6:71:93:3d:65:bc:77:ed:81:
91:24:e7:9d:f2:84:4d:e2:50:1f:3e:19:41:00:b8:
75:8c:a6:5e:2d:3d:d3:d1:6e:56:90:a2:37:bd:78:
c2:6d:0a:93:f5:4a:e3:fe:b8:75:29:c2:d4:78:b7:
7c:0c:e0:38:9a:48:2e:a5:d8:23:1c:fa:76:27:bf:
27:18:db:25:60:f3:af:67:89:44:1c:6a:9c:62:5f:
db:2f:b8:f5:39:2d:52:bb:ae:45:5c:4d:c9:3e:36:
c1:eb:b3:35:16:a4:aa:82:5d:75:3d:40:58:c5:37:
d4:e6:01:3b:3a:eb:6d:86:11:70:87:6c:9d:50:11:
f8:41:c1:63:62:d5:dd:9c:4f:b6:72:6c:b9:0d:ff:
67:98:5b:9d:17:92:7f:24:41:32:a9:da:a4:6a:1a:
80:f6:ed:d5:6a:f3:2c:b4:ac:8d:39:05:e9:78:70:
5f:34:a7:c9:ea:29:b9:3f:16:c3:79:26:7f:75:ae:
ff:eb:ff:fd:3d:8e:48:cb:29:9c:7a:a4:6f:2f:b0:
34:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CC:A8:B2:56:62:7D:92:D1:70:36:14:3B:FF:6A:10:A7:B6:D9:EC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9121E1E/8C9DD9649F9611F1A0C006F54311F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9121E1E/8C9DD9649F9611F1A0C006F54311F970/Z8yoslZifZLRcDYUO_9qEKe22ew.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18356
sbgp-ipAddrBlock: critical
IPv4:
103.60.185.0/24
202.8.78.0/23
IPv6:
2407:a500::/32
Signature Algorithm: sha256WithRSAEncryption
19:ce:80:bf:69:a2:dc:0f:33:8c:b8:9d:92:65:8b:bd:64:b0:
38:ed:86:24:f2:f9:ae:d9:f8:ae:7d:19:ed:21:db:67:40:82:
fe:48:3e:3d:df:7e:84:43:a0:0a:cd:ac:09:4d:cb:54:27:39:
14:d8:00:17:97:09:30:0e:e2:d0:11:30:cd:08:27:a6:62:16:
aa:99:ec:04:54:01:a1:7a:ba:4e:e9:cb:5b:6e:d8:44:17:24:
77:13:d9:ef:6f:62:68:1c:1d:b2:69:2e:a8:f0:09:70:20:53:
1b:da:bf:d8:ed:0a:a5:af:35:95:86:5e:0a:60:d4:18:97:f7:
23:0b:64:b5:4d:ab:de:a8:18:a8:d8:d3:04:44:6f:e9:07:00:
ef:f4:a8:eb:8e:d7:f4:d1:94:c4:e5:40:ea:e6:21:92:14:03:
55:c6:e0:f9:73:c6:7f:34:4d:fc:1b:13:b3:e9:5a:63:82:be:
56:d0:87:59:7d:10:80:18:48:13:ca:dd:aa:36:0f:06:e1:c9:
0e:9e:d3:bf:57:7c:ed:37:fc:fd:da:9e:84:0f:c0:b6:72:46:
0f:cb:11:2f:2b:c7:34:49:cd:15:09:47:ce:49:2c:96:23:c4:
1d:0d:e5:b7:2b:c5:f1:d1:a6:da:1d:f5:8e:67:61:5c:3d:a6:
da:d1:33:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:40:29 2026 by rpki-client