Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
File: tsy15DHkUBkVDE83IfT4Cm8u19s.cer (raw, json)
Hash identifier: EOVHY5QucW1d8hNzFPPDXBK+wdhgXAEVvQFDUbhQeOU=
Subject key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029F62
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:10:50 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 134989
IP: 103.205.16.0/22
IP: 203.76.252.0/22
IP: 2402:3220::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171874 (0x29f62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:10:50 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9186513, serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9c:c0:10:56:c2:81:a8:e6:b2:be:9d:d3:12:
a5:c5:44:e1:03:76:21:a2:b9:1c:4b:e7:7c:b4:e4:
92:e8:02:11:e6:14:47:65:fc:93:0f:b7:a3:7b:de:
35:75:c6:3e:49:0d:17:a6:7f:45:e0:e3:0c:5b:0d:
4c:19:01:80:ff:a2:cc:76:42:8c:4f:0f:3d:36:36:
cd:ae:11:48:72:86:d0:57:fc:72:ad:10:c4:7d:18:
61:fc:70:cb:f0:9f:c8:c1:2f:2b:f6:63:c9:53:a6:
14:a8:ac:53:fd:a7:20:5e:5a:fc:3a:f8:71:14:cf:
3d:70:33:38:e4:74:cc:f7:90:3b:94:01:c5:87:59:
d0:60:54:6b:48:5c:cc:0e:a4:d1:5b:6d:06:ed:80:
d0:44:c8:be:49:ec:77:fd:ba:4c:c9:cf:57:cc:10:
53:9f:10:30:5c:c3:4d:69:9d:55:5f:d5:f7:6e:14:
c7:f0:ae:9f:60:8a:96:76:de:30:93:21:ea:94:5b:
a9:c8:ba:be:00:ce:d2:05:e2:a7:33:d7:64:39:7f:
8a:77:7c:44:92:59:4a:9e:b3:73:b0:be:45:09:3e:
30:ad:30:4e:6d:9c:98:c9:dc:8b:9c:73:62:f0:bd:
0d:ac:d2:df:a4:59:a8:ff:bd:28:1d:8e:52:c7:70:
47:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134989
sbgp-ipAddrBlock: critical
IPv4:
103.205.16.0/22
203.76.252.0/22
IPv6:
2402:3220::/32
Signature Algorithm: sha256WithRSAEncryption
76:da:1e:73:71:9d:5d:4d:cc:ec:12:94:6e:27:fd:e7:95:62:
c0:68:ef:95:18:b0:95:6f:2a:49:d3:b7:d8:65:2a:99:eb:17:
70:29:b7:2c:c6:20:5f:c8:de:d1:2f:54:58:d9:48:e6:41:dc:
df:99:34:77:29:32:a5:39:2e:5f:f9:e7:da:1b:bd:1b:3c:1f:
d8:6f:2d:91:de:1a:b0:f2:d9:92:61:a5:65:79:90:8e:40:8a:
0f:58:a7:34:5a:f0:cf:b0:d7:e0:9e:94:e9:43:4c:a1:cb:56:
f9:b8:f5:8d:ff:ef:d9:b9:fd:ab:b9:1e:8e:59:35:20:87:0b:
03:15:fe:54:a0:f9:57:b0:c3:37:4d:be:94:aa:3c:12:6e:0b:
64:03:60:7f:fa:48:b5:7a:8f:0c:ff:6d:0b:6f:4a:41:47:b1:
51:5f:3e:a9:b9:8c:bf:96:55:c8:37:37:fb:c8:7c:78:ea:8e:
bd:ae:c6:91:d3:b1:b8:a9:cb:86:16:97:e5:50:fd:a1:30:37:
b7:55:f9:9f:8a:6f:21:3c:2f:35:eb:8c:85:41:05:2a:4f:4b:
ee:e4:87:86:b1:7e:c5:60:a0:42:67:c6:37:fb:b7:4f:ae:68:
21:13:59:c9:6f:88:4f:d3:b9:f7:f1:1f:66:3f:d9:8c:96:c8:
3d:a2:05:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:25:59 2026 by rpki-client