Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer
File: vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer (raw, json)
Hash identifier: xFsKLhk/z7DM6oer9gJgvHtxLII7dn9BpBaV40bweWs=
Subject key identifier: BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C36A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 Jul 2026 06:10:07 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 137841
IP: 103.115.112.0/22
IP: 2402:e640::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:51:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181098 (0x2c36a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 7 06:10:07 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91943F0, serialNumber=BD92626B400BB14DE41A50539D960FC5DD61DC37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ae:85:b2:8d:de:bd:77:b0:c0:eb:16:8f:85:
49:e8:ab:9d:0f:ea:49:28:9d:95:e0:ed:3f:ff:10:
2f:76:fd:f2:68:84:6d:e6:c6:6b:ab:37:8a:38:3f:
0b:35:41:23:5d:35:32:b1:8e:e3:ba:44:3f:cd:46:
0a:f9:1a:44:9a:21:66:ec:e2:bc:c0:74:70:36:da:
01:22:4f:a3:27:42:fd:bb:32:b8:ff:ac:46:e5:ee:
83:ca:54:73:4b:e2:62:28:a0:27:c9:c1:7c:1c:82:
11:35:e7:83:a7:42:c2:29:25:7a:17:4b:e8:95:c5:
57:0d:ae:3b:f5:ac:4e:e5:31:e1:f8:19:d5:ac:ec:
dd:74:03:94:a8:fb:25:0e:4c:a2:d8:43:bc:e2:67:
a1:0c:37:ed:da:c5:9a:19:0c:da:7d:f9:19:cb:9d:
e9:ab:2f:8a:aa:98:e6:00:67:f1:96:0b:d0:0e:24:
5b:a3:6c:04:05:25:20:27:c6:6f:26:06:85:6d:cd:
38:b5:37:b0:e2:3b:40:66:33:69:4e:04:7c:2b:e7:
81:3e:73:16:43:37:61:4e:7f:cf:0e:e2:6f:a3:7e:
4a:0d:99:02:e3:78:50:bf:13:a3:d6:9f:e1:34:1f:
79:f2:3c:4b:e5:f6:f9:b2:58:75:e0:f5:a0:c6:07:
e6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137841
sbgp-ipAddrBlock: critical
IPv4:
103.115.112.0/22
IPv6:
2402:e640::/32
Signature Algorithm: sha256WithRSAEncryption
16:c3:ae:6e:63:ad:88:7c:cb:b0:c1:58:d8:d6:fd:3e:21:72:
65:61:fe:84:a6:89:bf:d9:b3:3e:ec:83:3e:4a:f5:77:ca:98:
53:a4:57:60:31:48:78:24:aa:6a:3b:f2:d1:d0:01:ee:f6:6f:
b9:a3:e8:94:fa:18:23:ca:e4:87:80:3d:b4:65:b4:f4:bb:b2:
b9:45:a8:c0:5f:44:5c:87:43:0f:63:fe:90:c3:a1:92:c4:6d:
e1:04:89:d8:ab:44:8d:e8:3f:ad:49:20:f1:b6:3e:ee:99:45:
57:22:b7:4a:2c:28:e3:d8:1e:5d:95:28:87:15:00:05:13:af:
cb:49:6a:ec:a7:8d:66:a4:ce:02:04:f8:40:36:7e:63:97:25:
3a:99:0b:76:fe:2c:15:35:63:bb:0c:42:ef:35:c7:d1:aa:18:
ca:7d:c9:f1:13:80:d9:08:f0:13:0d:00:ab:4d:8a:d9:36:5f:
92:12:2e:30:0e:d2:4c:90:26:7c:f8:d3:12:7b:e5:f2:48:56:
7b:26:51:dd:09:2a:fb:28:1c:85:b4:57:a2:7e:e5:e3:a8:e4:
74:4e:6f:2a:c0:42:f3:d6:71:65:82:3c:66:bd:bc:04:89:cd:
f9:b3:7c:09:82:d4:62:2b:39:60:12:77:c2:f4:4f:c6:e9:9d:
70:09:6d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:52:09 2026 by rpki-client