Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer
File: cS61otcGnxjunGXzsBMnGtvx9UA.cer (raw, json)
Hash identifier: JP13Xa4sfhGJ8LR7NPOUjLEg+wfu65ftGx3G7YgJ0Xs=
Subject key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029544
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:23:41 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 150451
IP: 103.42.228.0/23
IP: 2001:df1:97c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169284 (0x29544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:23:41 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91A8A52, serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:8c:4d:bb:c3:0f:55:b8:bc:c6:72:a0:0a:
54:72:14:6d:bc:7b:ab:a0:6e:1d:1d:54:96:98:9f:
0f:7d:5b:7d:fc:e0:b6:a8:9d:6d:bd:d8:54:f8:44:
02:1a:97:47:e4:e6:de:3c:36:08:e4:e1:6c:fd:8b:
9c:73:4a:55:d1:a0:ce:c2:57:39:9a:26:96:50:6a:
f6:27:7d:e7:4b:df:8b:2e:f0:bf:48:61:ee:c8:93:
fe:80:3b:93:77:76:09:ff:3c:d3:a3:ea:da:c5:3d:
d1:1f:33:03:dd:fc:08:81:1d:ba:be:55:60:39:6a:
03:49:9d:5d:7a:e3:01:8d:cc:02:ef:1d:59:6a:d4:
16:ff:88:34:64:d0:11:f2:e7:32:67:61:c6:71:2e:
69:b6:1a:a7:9d:b6:e8:49:77:da:a6:41:b7:82:66:
c9:13:98:5a:c2:55:9d:4e:1d:17:87:c6:53:5e:a9:
41:bd:56:14:bd:58:0d:fa:05:a2:a9:52:99:a4:fc:
27:f7:fc:7c:02:10:31:43:b6:66:5b:a0:6a:30:77:
21:83:d5:fc:c6:26:a0:6d:7c:1d:90:9e:d7:89:e9:
89:6b:57:98:2e:64:11:31:ca:29:40:9b:e0:6a:9d:
a8:ab:b2:4b:d5:94:e7:cb:ca:6e:9e:59:e2:50:26:
72:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150451
sbgp-ipAddrBlock: critical
IPv4:
103.42.228.0/23
IPv6:
2001:df1:97c0::/48
Signature Algorithm: sha256WithRSAEncryption
61:00:41:14:63:ea:82:a0:d0:38:80:ee:30:6f:8f:96:b0:49:
b5:36:48:7e:30:38:f9:65:eb:6b:05:ae:b1:fe:6f:91:b1:a6:
b4:9b:56:36:4f:7c:12:40:0f:33:18:ac:6b:d1:90:ae:93:f9:
66:21:4a:70:94:e6:17:2d:40:be:98:54:a0:f2:6f:de:5c:22:
ad:af:84:c4:50:7f:d0:77:d1:df:39:8d:3f:64:7f:5e:e2:d8:
82:6f:2a:da:89:88:8b:c9:9a:53:7e:53:5f:72:c6:d1:86:b4:
b6:b6:4d:f4:59:1f:a5:20:f0:81:d0:f7:41:ba:48:59:71:0c:
fd:bd:70:ea:f4:6d:b5:27:dc:53:75:e1:4b:81:09:4f:6e:7f:
02:1c:cc:0b:53:60:c2:1b:1c:17:1a:36:e4:80:85:73:8a:43:
18:d8:af:a2:58:ee:6f:6a:01:7e:ed:02:f2:01:63:ef:0a:64:
74:36:3a:54:a3:ea:31:4f:e6:59:e5:0c:6c:bd:69:e4:c2:f0:
53:4e:eb:22:bb:21:9d:e0:c3:79:7d:41:b2:ec:3e:57:c0:ad:
db:a4:11:2a:43:88:38:b4:99:ff:23:75:80:7d:a3:7a:13:be:
28:27:cd:83:4e:0b:18:0d:8c:77:57:2d:bd:11:3b:a1:56:a9:
1d:51:ee:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 19:00:50 2026 by rpki-client