Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
File: ggn985rwLDua5QPyJddH5nqjzfM.cer (raw, json)
Hash identifier: W0z9Gu7vdChatYhzUT40NDL6XWYUrmohbmHN8plyX1g=
Subject key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02933F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:14:10 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 135403
IP: 103.180.48.0/23
IP: 2400:5260::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168767 (0x2933f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:14:10 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9144788, serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:14:ad:a5:bd:a9:10:23:f9:83:5a:fc:4a:7f:
0d:5c:ba:94:99:b5:a9:d3:46:e5:0e:42:51:bd:28:
b6:15:09:6f:91:ad:74:6c:7e:74:49:b4:51:88:d3:
e3:e2:61:53:c0:ce:c7:45:24:9b:7f:da:cd:56:7c:
ee:be:e3:67:52:44:26:1c:b6:26:5c:b5:ab:27:0a:
7f:1a:80:3f:6c:18:92:97:b2:4d:f3:94:eb:7d:27:
13:75:30:2f:84:07:34:4d:0c:15:99:f0:4a:44:4d:
b8:d7:f8:06:b4:29:f1:d9:68:07:65:ce:77:b8:79:
da:8b:1a:08:46:3c:1a:17:9c:b0:a3:ed:66:07:f5:
d3:ce:dd:29:65:39:8e:d5:f7:80:5d:68:9c:7c:58:
f4:23:1e:2f:71:92:ba:0d:3a:d4:ec:fe:e6:5e:61:
8c:7f:f3:8d:2e:ae:1d:d6:c2:9a:00:e1:e5:02:6a:
63:91:4b:cc:09:8f:32:a5:61:9f:c3:12:b7:1e:f8:
c8:86:39:13:a3:6f:62:8b:5c:52:ca:f0:9a:c8:c3:
60:ca:c3:57:8e:05:b0:f1:8a:f7:9f:fd:ce:09:10:
60:ca:47:ee:e5:d1:70:3e:72:e0:92:90:e8:72:c4:
9f:13:86:f6:1a:37:28:94:86:ae:4f:36:ab:c9:1d:
6d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135403
sbgp-ipAddrBlock: critical
IPv4:
103.180.48.0/23
IPv6:
2400:5260::/32
Signature Algorithm: sha256WithRSAEncryption
66:af:6e:e7:bf:ed:91:83:b3:87:1f:40:04:b9:51:80:22:b2:
2e:69:44:bd:6e:e9:18:0b:08:96:f4:57:57:c4:b2:2d:56:6b:
e6:0d:62:2b:61:ae:6f:dc:21:d4:59:cc:41:b7:c2:9d:4a:49:
d1:95:7f:33:81:ab:e9:16:95:0a:10:44:b4:e1:17:9d:01:d1:
0a:18:b1:05:94:e9:78:84:4b:b2:d4:38:9e:dd:b1:5f:4d:50:
d5:06:ec:cc:65:20:1c:e2:91:74:19:a5:cd:f2:fe:26:d4:7e:
64:78:ad:eb:84:e7:3f:30:9d:ca:49:4c:a2:9d:36:2a:b0:19:
60:71:b7:6a:79:5f:89:ed:0d:40:ea:26:e5:98:12:7b:e2:10:
a8:9e:b9:4d:1e:1f:d6:ea:fa:2b:06:f1:94:51:b9:e9:56:02:
d5:2b:3f:4d:98:34:a1:3c:2f:99:70:56:7c:83:38:aa:03:ce:
1a:0d:26:28:63:2b:7c:fc:ed:28:e8:69:be:ac:c6:de:32:4a:
6f:12:f1:7b:7b:42:ac:9f:86:d3:fc:6b:aa:6c:18:b3:f6:ce:
78:f3:9b:b0:c6:9c:18:67:8e:1f:4a:64:26:1f:b0:05:d8:60:
2e:6c:23:2f:57:be:9b:15:9c:a8:61:53:82:c0:8c:d4:01:a3:
7c:da:f9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:26:29 2026 by rpki-client