Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer
File: dRH-79yX09DgVRW7QMF431FGqcQ.cer (raw, json)
Hash identifier: 0yjxOjGecyef2Lx1E2gxUBpdqzEJFW0DanVCw+dNgPY=
Subject key identifier: 75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029DD0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:03:57 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 55420
IP: 27.0.4.0/22
IP: 103.29.198.0/24
IP: 163.61.18.0/24
IP: 2401:2200::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171472 (0x29dd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:03:57 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9131F8A, serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:17:71:e0:0d:13:54:f3:d1:d9:d7:24:4c:5e:
8c:c6:fd:ab:1f:6b:58:83:88:f0:44:56:44:10:7f:
07:c4:a7:4e:0c:70:6f:0e:2c:01:40:49:18:12:d5:
1a:77:95:5f:8d:0a:03:40:a7:8d:8b:ce:6c:f5:72:
72:b1:10:12:bf:4d:a0:fc:54:89:b0:2b:d6:c9:f5:
b4:f5:a9:d5:3d:1c:17:9d:09:28:02:eb:e7:42:bc:
a0:ec:de:12:67:6c:6d:eb:94:88:18:1f:c4:4a:68:
f6:e8:3b:4e:6b:0a:b9:24:98:99:ae:3d:31:17:83:
fd:a0:6c:84:ee:93:94:e0:1a:dc:8c:06:8d:f9:92:
a2:a1:f4:ce:45:36:76:47:2e:d0:ef:ac:3d:5c:ab:
7d:5c:2d:5a:0b:63:dc:64:c6:fa:5e:96:a6:dc:cf:
de:29:e9:01:7c:91:83:52:f9:74:aa:a9:a0:e4:66:
d0:f8:a2:a1:45:13:b5:e7:2c:1b:7a:79:63:96:85:
ff:99:c6:9d:64:0a:5d:2c:ec:87:8c:c3:7e:bd:c1:
b6:76:7b:a3:ff:3f:a2:28:6a:0d:99:1f:96:20:d1:
94:4e:9b:68:37:a3:97:fe:e1:16:6a:80:2d:5d:ee:
6a:73:d4:83:06:6d:8f:84:fd:13:78:75:5c:ca:6c:
91:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55420
sbgp-ipAddrBlock: critical
IPv4:
27.0.4.0/22
103.29.198.0/24
163.61.18.0/24
IPv6:
2401:2200::/32
Signature Algorithm: sha256WithRSAEncryption
8d:6a:8e:38:fe:4a:69:2a:83:eb:a4:93:eb:31:df:0e:7e:df:
f0:d2:ca:f6:39:c8:a8:ed:0d:5e:1b:43:2d:1d:65:03:45:bf:
fe:e2:20:77:ee:5d:b2:7a:3e:3c:15:9e:bb:50:c3:10:8d:f7:
15:43:8d:e4:4c:59:12:0b:3e:6a:82:35:c2:ee:3f:4c:73:95:
40:9b:81:4c:41:6e:0b:47:ff:f2:14:69:a2:86:9c:de:8c:e7:
3a:1c:8b:7e:7d:85:3a:1f:de:8c:c0:fa:ae:8f:df:02:2b:21:
78:30:8a:7a:da:d4:a5:96:a3:ca:6c:1d:aa:68:05:31:a4:fc:
6c:d4:b6:cf:87:2c:7a:37:62:39:2e:33:72:83:ae:89:fa:c5:
54:63:45:24:c5:7f:7c:b7:9d:75:4a:8c:67:d9:5e:9c:1f:39:
c1:c8:2f:5b:91:a4:b6:b8:3b:57:2e:76:55:24:77:62:55:33:
1f:c1:41:07:c0:db:14:44:5b:86:a2:c8:ff:8a:de:d4:f5:e9:
23:e5:34:49:4c:11:0c:9f:52:39:91:10:9c:f8:52:64:4b:1f:
7e:9b:d6:5b:38:5b:80:0b:57:1c:73:ea:96:36:88:61:ba:6a:
55:c8:d5:c2:6c:f7:d5:56:8f:90:d3:34:a0:ed:61:98:a9:9d:
b8:71:87:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:21:32 2026 by rpki-client