Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer
File: bG1HsRFPLVgaghKAXxLDdH80r4M.cer (raw, json)
Hash identifier: xlbrMximghu4u1fPM1r3rmOcYVwWcdUx+F0nn3HM8+M=
Subject key identifier: 6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0297AB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:36:05 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 135882
IP: 103.78.252.0/22
IP: 2400:1140::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169899 (0x297ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:36:05 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91C7672, serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:71:83:22:b1:df:8b:91:2d:64:48:99:aa:
ef:12:54:e0:ae:eb:ab:8f:5e:69:6b:34:32:f7:e5:
05:ac:8d:75:fa:94:a4:26:7e:0a:88:97:04:e2:c8:
81:a8:18:a3:d8:78:3c:33:e0:0b:ec:15:c5:6b:70:
32:2e:e6:fa:34:0c:43:65:e9:57:85:27:1d:c3:ee:
59:78:d2:a9:5c:bd:c1:24:0f:ff:db:78:32:f9:12:
5e:dd:22:65:cb:42:06:25:da:4a:10:fd:98:2b:34:
7b:40:84:3b:53:9f:fc:28:30:6e:5b:86:f0:07:f3:
93:16:f0:a5:c6:22:c8:ab:b7:07:17:26:cf:81:7b:
81:76:03:a1:67:26:72:7d:7a:f0:a2:f0:7a:91:39:
08:74:6a:d0:7e:73:72:b1:fc:6d:e5:f5:e1:4f:68:
33:16:3e:f1:33:bb:0b:33:c0:75:5a:f2:f8:ed:79:
be:18:74:71:39:17:46:af:62:b5:11:2c:a9:bd:6e:
69:33:25:5c:96:3f:45:a6:25:41:18:b0:c8:af:5b:
2a:da:12:62:fd:fe:5b:1b:b3:42:e8:8d:1a:d8:a8:
0d:74:ac:41:08:eb:7d:1f:02:8a:cc:d2:b2:e4:60:
4f:fa:a2:f2:d0:12:05:fc:29:f6:4e:b1:84:69:16:
d3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135882
sbgp-ipAddrBlock: critical
IPv4:
103.78.252.0/22
IPv6:
2400:1140::/32
Signature Algorithm: sha256WithRSAEncryption
01:1f:cf:e6:78:f6:94:88:1e:c2:aa:12:5d:88:c9:28:7d:11:
1e:93:36:63:3f:15:27:1e:78:af:c3:1b:bc:cb:5d:a6:f9:6b:
f0:bb:81:9d:69:f9:80:98:ab:43:73:88:27:c3:eb:1e:bd:bd:
a7:8d:4c:02:a0:9c:7a:13:5c:0c:4e:9f:50:5b:e9:db:08:db:
74:f4:f9:4e:b3:89:72:dc:dc:87:b1:73:b9:e4:50:c0:4c:b7:
e1:8f:71:15:03:be:00:95:81:b3:5c:35:37:80:e0:f3:7f:16:
90:54:94:56:9e:6e:a4:46:c9:d6:97:02:41:a7:b3:7d:a5:cc:
d4:6c:11:f7:2f:08:f4:78:eb:25:6d:be:b4:a4:11:7b:a1:3c:
3f:7c:da:5e:19:0a:ea:37:70:83:af:98:e6:a2:c4:ec:2e:7f:
78:f7:3d:ce:a3:31:af:65:17:88:b0:bb:aa:91:d0:ad:9d:76:
c4:d7:4f:13:62:3c:aa:1b:11:17:06:20:20:9a:fa:cf:4c:6d:
a1:52:6b:e1:32:d5:9e:25:fd:d2:0c:39:f0:11:10:63:f6:14:
1c:3d:6f:d4:b7:51:d2:23:f5:45:7f:74:01:3c:32:21:7f:5d:
fc:b5:c0:24:75:5b:68:9e:c7:ab:14:89:2f:39:ff:f7:c6:f1:
a8:10:d7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:36 2026 by rpki-client