Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer
File: g4n9Rv74flk96Bz_3N8guiynYB4.cer (raw, json)
Hash identifier: qC6AOR8iytLnZUmcQPfycLxpR8aJO6YnlzIifc7GmyY=
Subject key identifier: 83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029814
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:38:08 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 9744
AS: 137984
IP: 103.127.24.0/22
IP: 2404:1a40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170004 (0x29814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:38:08 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91475BA, serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:33:3e:44:85:3d:75:61:20:5a:4d:8f:33:
4b:aa:27:f4:41:2f:8b:4c:f9:b9:16:c2:5d:c8:9c:
1f:72:ce:b0:b9:08:59:ce:81:9d:f0:69:09:d2:db:
d0:c4:00:67:65:93:00:1b:19:82:8a:76:8b:4f:9a:
55:5e:b1:26:67:a5:72:8e:e7:de:f5:fc:0c:0b:24:
34:9f:17:a1:eb:7b:64:71:68:e6:4b:84:a8:3a:68:
a8:0e:a9:38:28:c6:7f:1a:13:3c:b1:24:c5:09:7b:
8d:92:37:41:a6:50:da:f0:9f:b5:ae:3b:73:a3:4a:
e3:0b:ae:58:b5:52:a2:e5:fe:8c:b7:6e:3e:60:ea:
12:07:d0:f8:17:8b:10:6e:e7:68:bd:ab:82:cc:ba:
6f:e2:25:38:f5:fd:61:7a:02:ac:c5:30:b5:6f:2b:
7d:20:7d:b5:c5:73:72:10:b3:cf:78:14:30:41:5f:
d4:82:86:6b:5a:96:37:b6:8c:0b:23:19:28:53:ec:
05:f9:07:44:8a:16:c6:1f:59:af:f9:e7:bb:c4:19:
ac:3d:00:db:2f:4f:06:91:c4:a6:c9:66:06:37:56:
95:a7:73:1d:36:e6:05:52:e6:0b:d4:bf:be:87:e4:
98:35:af:a4:30:fc:5b:94:b5:d2:a9:2d:27:22:fe:
d6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9744
137984
sbgp-ipAddrBlock: critical
IPv4:
103.127.24.0/22
IPv6:
2404:1a40::/32
Signature Algorithm: sha256WithRSAEncryption
6f:18:67:b3:2d:f3:03:c2:79:1d:58:e3:ca:95:69:66:d7:46:
89:25:48:a7:26:c0:de:77:49:cb:ff:b1:e7:9c:d2:2a:d0:d7:
f9:01:63:71:ba:b8:2b:31:b3:8a:fa:4d:42:ef:81:d0:aa:06:
a2:b6:e2:56:36:36:66:a2:9a:5a:80:b8:8f:4e:a7:48:06:6a:
3f:de:04:14:d1:e5:03:52:65:5d:70:fe:b0:cc:0e:85:07:e6:
0f:2f:d5:34:d7:ff:7c:5e:f7:c9:1f:ef:36:74:5b:b7:92:68:
84:c4:f1:c2:d0:d9:27:0f:b9:03:3b:ab:b7:a2:7c:5a:7b:ab:
bd:ac:e2:c0:fb:ae:f9:c6:02:01:c9:7e:cf:84:8c:d0:f5:6d:
d0:eb:4f:c2:37:12:c9:b0:48:8a:38:0a:35:bd:ee:7d:3e:0e:
e1:b2:eb:b9:e5:d2:90:b6:69:e0:85:8b:18:b5:64:c2:55:c5:
f5:ed:66:2e:63:f4:77:1b:f0:83:d7:f7:cb:5a:a5:fc:d7:46:
af:d0:8d:8f:b2:37:6f:9c:5f:56:41:8a:84:11:51:3c:5a:4b:
b5:7c:85:c7:a9:03:1c:37:dc:98:f5:6c:0f:0f:f2:79:91:fa:
a7:66:c4:71:dd:d3:c4:93:e0:52:d7:28:6e:09:ec:c0:4c:00:
e9:33:45:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:23:12 2026 by rpki-client