
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
File: gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer (raw, json)
Hash identifier: pDrYJ7USZnoeySTwJxKOhdyOTvrnaIsvmTncC/m8pV8=
Subject key identifier: 80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BC4B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 10 Jun 2026 08:59:28 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 153623
IP: 103.162.245.0/24
IP: 163.61.192.0/23
IP: 2401:f1a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179275 (0x2bc4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 10 08:59:28 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9114FD8, serialNumber=80463074D83F5E80354D1970586F54A8965E18D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:b1:c6:0e:68:7a:ad:af:96:68:e0:f7:b6:
7b:bc:64:82:b6:f4:4d:2e:c6:25:3d:cd:76:9f:8f:
4d:33:59:b6:58:09:b7:7a:02:4c:d7:ab:60:ae:aa:
cb:ec:42:c8:26:d3:38:7e:e7:05:a2:1a:e6:e2:08:
cb:fa:68:af:fe:d1:47:1c:6c:67:00:76:68:ff:a9:
3f:78:c8:47:09:20:fd:76:21:a7:a6:91:34:e3:f9:
31:09:2b:cb:e4:3b:86:61:fd:26:3e:5c:e6:6d:9b:
ed:d0:0b:ce:a8:bb:e2:53:be:36:0d:db:60:2c:e5:
ed:41:d7:0f:66:97:86:7c:57:10:14:46:70:40:5b:
4e:ad:85:63:f4:85:46:2a:b8:7d:0c:7e:e5:17:7f:
9e:45:64:c6:b9:15:b0:3d:32:fa:1a:e3:8a:16:14:
a7:e9:58:bf:c2:b4:96:3f:5a:2e:09:a5:9f:b1:31:
e8:ca:b8:d4:3b:15:3f:f4:29:78:21:2b:9d:55:a0:
60:ae:09:49:4e:fc:86:d7:13:dd:71:0a:ab:32:0c:
8d:31:94:80:30:ca:4c:c7:91:17:f2:7f:3e:b3:fb:
ed:70:27:fb:87:44:87:71:b8:11:bd:dd:7c:47:2b:
13:d9:c7:f3:d4:f9:84:90:b3:d5:ce:a7:61:6e:11:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153623
sbgp-ipAddrBlock: critical
IPv4:
103.162.245.0/24
163.61.192.0/23
IPv6:
2401:f1a0::/32
Signature Algorithm: sha256WithRSAEncryption
46:42:d9:64:2a:78:e7:9d:3c:bc:c4:4b:e1:34:68:2b:1e:f1:
78:18:da:3c:ad:61:b9:50:7c:ef:e2:56:18:fc:47:06:88:60:
6e:f3:30:f9:17:3e:21:6f:33:61:48:1a:25:12:2c:bb:11:03:
30:2e:9e:0d:bf:b9:f7:b9:59:e2:6c:6b:20:5c:89:8d:66:dd:
96:70:a9:e3:e3:9f:07:53:db:f3:e2:22:87:96:20:b5:11:dc:
16:21:26:8b:29:b7:31:2d:12:36:29:1f:e0:4a:4d:6d:4b:d9:
ae:30:ab:2c:54:ef:b5:4f:f8:23:6a:50:cb:1a:c4:55:bc:70:
7e:4f:e9:53:ef:b0:c6:62:d2:51:fe:7e:86:d4:33:89:65:a9:
47:92:07:dc:88:e3:dc:70:62:e5:12:77:46:16:47:5c:dd:af:
e0:0a:3e:c6:20:7e:e9:55:c4:85:5e:aa:e3:75:f3:a5:0e:6b:
0a:74:d9:44:55:17:9d:b9:6c:2d:87:48:06:2a:3a:19:60:10:
31:d7:7e:76:29:73:de:47:76:af:75:78:8c:d2:1a:ed:4d:b8:
85:97:53:d6:8e:0b:06:f7:f9:6e:8d:28:fa:a9:c3:2c:94:71:
06:d8:d2:4b:c4:da:50:1c:8f:34:23:ad:f1:9d:fa:94:4f:76:
ce:ef:c0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:04:13 2026 by rpki-client