Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer
File: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer (raw, json)
Hash identifier: 7BKq+zyPoYG2TdT8mbZ4KPOfqzW4HvC6NG6VBH0HJGc=
Subject key identifier: 97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029469
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:19:46 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 134462
IP: 103.160.122.0/23
IP: 2001:df5:9c80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169065 (0x29469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:19:46 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91887ED, serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:01:0c:57:10:7b:8e:1e:bb:03:3d:e2:02:
a2:a4:86:ed:ff:80:44:a4:4c:e6:39:2c:d3:d3:ad:
57:e4:2c:6a:59:17:a8:67:fe:7b:b9:37:5a:7d:4c:
05:a7:49:fa:2a:24:37:49:c5:68:47:62:97:6c:2d:
d7:55:b8:5d:6d:5c:79:cb:64:b7:d2:2f:d4:49:6e:
9b:7a:cb:b6:b4:57:6e:35:84:84:b2:5a:f0:ea:40:
69:c2:e3:2a:2d:41:18:17:bc:17:31:69:d3:96:81:
21:2b:4a:9b:78:af:0e:65:70:ec:22:55:73:f4:ab:
e5:a2:93:f2:d7:9e:df:82:c4:75:af:71:0a:0e:bf:
ef:6f:45:e3:a2:8a:b2:d1:37:64:d5:1d:1b:aa:cc:
80:7a:8e:cd:47:e1:9e:e5:48:3e:ca:42:10:8d:f4:
fa:0e:9b:61:8c:ce:65:8d:e1:60:83:b2:09:83:0f:
ad:3c:d3:45:5c:45:42:43:09:5a:be:e9:6a:76:f6:
6d:ca:37:a3:db:31:f1:ac:55:f0:b5:aa:de:36:66:
2b:db:98:28:76:f6:10:64:05:b9:18:dc:9a:18:16:
c2:06:db:7e:6b:aa:c8:8a:3a:f0:87:59:0e:ae:83:
f0:b5:e7:53:a9:ee:10:b9:fd:72:15:e2:51:a8:92:
ed:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134462
sbgp-ipAddrBlock: critical
IPv4:
103.160.122.0/23
IPv6:
2001:df5:9c80::/48
Signature Algorithm: sha256WithRSAEncryption
54:03:5d:75:25:e1:f3:b5:71:a9:bd:36:9e:a8:de:fa:35:4c:
49:e8:b7:73:56:6b:ae:5d:cd:3e:8d:be:39:03:2b:db:9b:88:
62:af:62:e8:bd:50:f5:94:3d:16:c5:43:de:03:ca:6b:e6:92:
4c:8e:1a:75:01:67:90:91:98:0d:10:50:9b:4e:67:ef:27:41:
3b:3f:20:6b:8e:76:94:a5:2c:73:b9:23:1d:60:65:fa:d1:58:
6b:3f:6d:ef:65:77:ef:46:4b:63:0f:36:67:fa:3e:19:7e:f8:
dc:b9:d5:53:4c:0f:03:e7:ae:f3:02:7b:b3:59:a1:30:4c:93:
88:1a:cd:e8:fa:f0:4c:13:de:24:4b:fb:75:8a:dc:ca:2a:d5:
2c:4c:76:c3:27:35:38:6a:bd:fa:08:dd:40:df:dc:68:fd:90:
fb:97:8b:b0:73:27:f6:5c:79:ab:50:94:de:c6:31:f5:ee:e7:
bd:a6:1a:57:73:18:ad:ec:4f:8a:d4:9c:87:f2:7d:94:f6:a1:
73:76:f3:93:57:4c:1d:1a:99:01:96:a6:a5:6c:95:6d:e2:13:
0e:1e:7b:76:cb:2f:8b:d0:49:ac:5f:37:f0:70:4b:ee:d7:54:
1d:cf:da:86:52:3c:f5:f6:44:b9:e7:65:02:40:b4:cb:02:31:
98:ef:f8:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:26:27 2026 by rpki-client