
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer
File: gtgYhh3Upw93CNIF5LiehRTKH2w.cer (raw, json)
Hash identifier: 92J2uEq9Cr0XFKmyTzNiBXXwlqCHxsM+FABAT7csY+8=
Subject key identifier: 82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C259
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Jul 2026 14:47:56 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 135594
IP: 103.67.165.0/24
IP: 103.152.4.0/24
IP: 2001:df3:4a00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180825 (0x2c259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 2 14:47:56 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91C9A8D, serialNumber=82D818861DD4A70F7708D205E4B89E8514CA1F6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:29:b8:58:95:2b:f0:84:00:c5:e6:48:a1:10:
f5:b1:ba:4a:54:48:cf:df:6f:5c:68:89:ae:92:5a:
df:de:bf:33:17:a0:23:2a:2f:8e:16:74:cc:fa:1e:
d8:af:61:9b:6a:8c:c5:36:61:d7:14:8c:df:07:90:
1c:65:0e:c2:83:40:c5:3b:77:5b:55:f9:83:fb:5c:
79:34:90:a5:1b:ea:9c:fa:36:f9:e5:8b:2b:e6:38:
f8:28:27:39:09:2b:ac:c3:2e:ec:b1:ca:9c:81:ba:
58:d3:54:1c:b3:6b:f0:ab:16:5b:42:6e:3d:8a:8e:
f1:e7:7c:c8:3f:a4:33:b3:d2:75:a3:0a:12:cd:1f:
05:b2:33:f1:01:0d:95:2c:cc:72:ea:19:68:f1:89:
fc:cd:c5:5d:51:e4:ea:fc:0b:f3:8e:43:69:11:98:
e8:5b:aa:f1:5e:26:c1:c4:9c:8e:df:9c:e8:0e:79:
61:f2:9d:cd:5e:6e:2b:f5:d2:cf:f4:b2:59:28:94:
d1:ae:fd:ac:7b:2e:56:62:83:79:02:8d:83:c8:c7:
e7:dd:ea:a5:72:90:34:5c:43:6e:e1:f3:f8:5e:34:
d8:16:ab:3a:15:74:03:2f:24:b6:70:e7:14:07:3f:
2d:97:c8:23:bf:fc:d8:a4:5a:d8:65:65:d7:a6:0f:
0c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135594
sbgp-ipAddrBlock: critical
IPv4:
103.67.165.0/24
103.152.4.0/24
IPv6:
2001:df3:4a00::/48
Signature Algorithm: sha256WithRSAEncryption
40:aa:0b:3e:be:9a:63:5b:7a:d9:34:76:0e:fb:e1:6b:bd:ef:
b6:c4:a5:88:56:d0:f0:f0:a3:95:ab:98:61:b6:00:e3:00:7c:
a2:71:1f:6a:6f:53:e0:0e:0f:2b:7f:4d:c5:d3:5b:56:ec:5d:
1b:df:38:2e:a0:f7:f2:0e:76:55:2e:ee:2a:2b:b6:29:13:4f:
85:93:0c:23:a9:b6:b3:a6:e5:35:7d:c7:5f:40:45:e7:f6:8c:
a3:1d:58:1f:8e:26:90:8b:7b:3a:f6:a4:d1:fe:44:f1:a1:e4:
75:ff:89:a4:2d:99:eb:a4:c6:57:6f:d1:fa:1e:59:47:aa:fd:
4a:8a:d9:8a:f6:30:81:34:da:76:98:0f:5b:7b:a4:6a:d8:a4:
b6:f8:63:46:08:43:59:84:83:e1:f7:81:50:14:8e:7d:1f:58:
a5:5b:1b:37:ea:b7:ed:a3:b8:bc:ee:e3:72:6b:16:be:8f:8f:
77:11:37:d3:30:ce:85:a3:da:1b:30:91:38:24:78:99:ba:63:
a9:8c:1f:4a:08:d8:8b:8a:59:be:47:06:15:07:cf:d6:aa:3e:
4c:de:3a:91:36:43:ca:14:44:57:e3:01:b2:92:71:a6:94:03:
91:40:f8:f7:03:d0:fd:3b:c0:95:9f:44:2f:a6:28:09:10:04:
b0:9c:f4:46
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIDAsJZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDcwMjE0NDc1NloXDTI3MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzlBOEQxMTAvBgNVBAUTKDgyRDgxODg2MURENEE3MEY3NzA4RDIw
NUU0Qjg5RTg1MTRDQTFGNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDoKbhYlSvwhADF5kihEPWxukpUSM/fb1xoia6SWt/evzMXoCMqL44WdMz6Htiv
YZtqjMU2YdcUjN8HkBxlDsKDQMU7d1tV+YP7XHk0kKUb6pz6NvnliyvmOPgoJzkJ
K6zDLuyxypyBuljTVByza/CrFltCbj2KjvHnfMg/pDOz0nWjChLNHwWyM/EBDZUs
zHLqGWjxifzNxV1R5Or8C/OOQ2kRmOhbqvFeJsHEnI7fnOgOeWHync1ebiv10s/0
slkolNGu/ax7LlZig3kCjYPIx+fd6qVykDRcQ27h8/heNNgWqzoVdAMvJLZw5xQH
Py2XyCO//NikWthlZdemDwxNAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUgtgYhh3U
pw93CNIF5LiehRTKH2wwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM5QThELzMyRjFGNEMyODNFOTExRUNCODczQzg3MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDOUE4RC8zMkYxRjRDMjgzRTkxMUVDQjg3M0M4NzFDNEY5QUUwMi9ndGdZaGgz
VXB3OTNDTklGNUxpZWhSVEtIMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhGqMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAZ0OlAwQAZ5gE
MA8EAgACMAkDBwAgAQ3zSgAwDQYJKoZIhvcNAQELBQADggEBAECqCz6+mmNbetk0
dg774Wu977bEpYhW0PDwo5WrmGG2AOMAfKJxH2pvU+AODyt/TcXTW1bsXRvfOC6g
9/IOdlUu7iortikTT4WTDCOptrOm5TV9x19ARef2jKMdWB+OJpCLezr2pNH+RPGh
5HX/iaQtmeukxldv0foeWUeq/UqK2Yr2MIE02naYD1t7pGrYpLb4Y0YIQ1mEg+H3
gVAUjn0fWKVbGzfqt+2juLzu43JrFr6Pj3cRN9MwzoWj2hswkTgkeJm6Y6mMH0oI
2IuKWb5HBhUHz9aqPkzeOpE2Q8oURFfjAbKScaaUA5FA+PcD0P07wJWfRC+mKAkQ
BLCc9EY=
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:19:48 2026 by rpki-client