Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer
File: ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer (raw, json)
Hash identifier: PFYG8Rf4OH+iAuQB2z8RnGbO/nxyLfJ1/ACDG4EvTjo=
Subject key identifier: 66:65:4E:01:20:39:32:6E:13:D3:CD:9E:F5:8D:A9:EF:07:77:22:77
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02927C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:09:40 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 136225
IP: 45.120.196.0/22
IP: 103.84.52.0/22
IP: 2400:9ac0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168572 (0x2927c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:09:40 2026 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A9129738, serialNumber=66654E012039326E13D3CD9EF58DA9EF07772277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:c4:4f:a4:32:5d:39:7a:a7:7f:43:b8:69:
78:6a:55:66:45:d1:20:3e:3e:43:86:76:8e:56:fe:
31:ff:e6:3e:a8:c6:81:4d:2b:5e:2c:a4:ca:a3:43:
8f:8b:a4:32:3d:95:05:a9:85:43:72:b8:3d:7a:3d:
5e:d5:fc:e2:e6:8d:7d:57:ad:f4:0e:1c:a4:d0:59:
72:16:0c:5d:58:49:65:56:5c:19:10:33:f0:58:5d:
44:cd:50:4e:08:d4:82:ad:cb:90:93:6d:18:5a:6d:
a8:6c:3d:f1:db:5f:e5:3b:69:bc:8a:8e:ab:08:fd:
5e:89:3a:2e:8e:8e:ad:ec:83:b5:f5:8f:36:3f:2a:
c1:38:d3:c0:52:0d:db:4d:30:3b:b1:b1:56:2f:8f:
7d:96:31:5f:5a:36:b6:33:84:34:c7:78:0f:24:da:
91:f9:00:df:4d:05:d8:6d:e0:ca:35:ca:73:3a:17:
68:48:1f:7c:5c:ea:af:26:68:b0:9d:53:6a:08:21:
19:ec:e7:6c:f8:00:30:b1:ad:10:64:56:af:70:78:
ac:a9:cb:df:f1:a7:18:61:59:ce:3e:e3:4e:05:1e:
35:cc:1a:af:98:92:78:9c:2d:9a:5e:78:29:a5:58:
1a:a0:40:cc:28:21:3e:48:23:c7:4f:9a:d4:a2:10:
6b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:65:4E:01:20:39:32:6E:13:D3:CD:9E:F5:8D:A9:EF:07:77:22:77
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136225
sbgp-ipAddrBlock: critical
IPv4:
45.120.196.0/22
103.84.52.0/22
IPv6:
2400:9ac0::/32
Signature Algorithm: sha256WithRSAEncryption
d0:6c:f6:af:1b:c2:de:60:e5:a6:eb:79:3e:dc:e8:a0:1e:6f:
02:97:f6:71:e7:45:dd:62:dc:1d:f0:29:51:ef:70:df:ff:8a:
41:ee:d6:ab:49:6e:ab:a4:40:b5:b2:6f:13:3f:7a:72:61:9e:
84:da:1f:3a:10:fa:ec:bb:96:f2:5c:37:29:0d:40:d2:31:fd:
21:c0:26:ba:85:2e:0a:95:0b:46:2f:67:c0:1b:c3:2e:83:b6:
1a:ae:45:f0:a6:6d:da:51:3d:28:09:62:02:da:d5:0a:f0:fb:
09:0a:df:bb:34:70:90:bc:77:05:69:9f:85:dc:7e:86:8b:7a:
f6:04:ff:8b:92:f2:7d:ce:52:7a:d7:7b:21:ea:2a:67:4f:54:
2f:78:8b:9a:ea:8b:25:40:cc:55:d6:16:6c:51:55:85:dd:00:
b2:d7:d2:9c:e6:25:5e:51:27:b9:c3:4b:5c:9c:ea:5b:26:f3:
2d:a4:d9:67:2b:f0:c6:a0:4e:de:51:2b:94:d3:e7:39:d0:b6:
81:01:6f:bf:85:f3:e3:6b:4e:49:1c:f9:72:a5:b2:14:f0:7d:
2e:9a:ae:d1:83:41:d9:dc:ac:be:2f:83:8f:92:1d:d7:ee:0f:
2b:35:69:8a:66:6f:69:68:37:97:80:f4:70:7b:dd:68:3e:19:
e2:dd:e0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:07:26 2026 by rpki-client