
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ydng2CxkMec8k65V7gMJ6xAaqz4.cer
File: ydng2CxkMec8k65V7gMJ6xAaqz4.cer (raw, json)
Hash identifier: MGC1gbs/eR6hqUH/x6JykUu0fR8DtuS/nwz5CgSYVbs=
Subject key identifier: C9:D9:E0:D8:2C:64:31:E7:3C:93:AE:55:EE:03:09:EB:10:1A:AB:3E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D3D6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9175FD2/D5989518A82F11F189CAAA7B3511F970/ydng2CxkMec8k65V7gMJ6xAaqz4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9175FD2/D5989518A82F11F189CAAA7B3511F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 04 Sep 2026 07:11:26 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 138498
IP: 103.127.18.0/24
IP: 2001:df7:5b00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185302 (0x2d3d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 4 07:11:26 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9175FD2, serialNumber=C9D9E0D82C6431E73C93AE55EE0309EB101AAB3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:33:0d:b6:12:49:de:1e:b2:b7:d2:b1:aa:15:
11:81:15:20:4a:13:80:a1:11:39:08:50:06:ed:aa:
ca:3a:a8:54:42:a1:18:9a:d0:a7:60:64:fb:d1:40:
fa:86:e4:06:16:57:b9:b9:ce:1a:19:4a:35:ca:f7:
1b:b4:26:77:6a:bc:61:2c:3e:4d:a2:73:aa:2c:64:
ab:a3:d6:46:52:03:4b:34:60:39:19:07:da:35:b3:
21:d1:40:85:78:52:16:2b:67:6b:07:10:92:b0:7e:
28:07:a3:cc:3e:bb:b5:7c:6f:c6:6d:14:d6:89:c7:
7e:79:c0:6e:ed:c0:16:d6:44:6a:4e:53:30:d9:50:
99:49:cb:a4:db:77:a7:1d:ae:16:0f:1b:91:a1:18:
a1:e2:d8:f9:0e:00:1f:6b:6e:7b:a6:6e:75:01:95:
33:72:f9:ff:32:3f:ee:9f:b5:c9:f3:63:3e:7b:a3:
a6:7a:5e:65:8e:0a:ff:4a:15:4d:6d:8a:9a:9a:58:
ad:61:6b:94:c8:19:a9:a1:f2:70:38:6c:64:d4:8f:
4e:ef:c4:a5:c5:0b:ec:d8:70:5f:0f:f6:0a:a4:b4:
d6:f7:42:c8:1e:c9:79:58:bc:4b:3b:d2:12:37:42:
7c:6a:f2:a5:99:30:dc:4f:6c:87:b8:e9:26:0a:c7:
0e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D9:E0:D8:2C:64:31:E7:3C:93:AE:55:EE:03:09:EB:10:1A:AB:3E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9175FD2/D5989518A82F11F189CAAA7B3511F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9175FD2/D5989518A82F11F189CAAA7B3511F970/ydng2CxkMec8k65V7gMJ6xAaqz4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138498
sbgp-ipAddrBlock: critical
IPv4:
103.127.18.0/24
IPv6:
2001:df7:5b00::/48
Signature Algorithm: sha256WithRSAEncryption
b4:c3:9a:70:9c:0f:42:80:07:47:65:e6:98:bd:a8:22:51:3a:
2b:e3:23:e4:79:74:97:95:28:3b:d4:2d:33:b0:30:06:79:ce:
eb:ed:71:13:b9:93:8f:d7:20:74:08:ad:8f:e9:ca:be:c9:92:
bc:23:c2:93:2c:50:4a:65:d2:e5:63:e2:e6:3d:8a:7d:74:6a:
bd:30:52:f4:4c:8d:71:60:6f:d7:dd:38:a6:a1:60:bf:28:48:
e2:c6:52:9f:b3:4a:a9:0a:ea:d6:f6:a7:87:39:5d:80:39:b5:
8a:44:8a:38:b0:5f:69:d0:90:1b:2d:70:75:58:17:ea:b1:3d:
c5:2e:6b:c2:00:7d:c5:ba:b0:f2:f8:bb:2b:ce:1b:74:88:8f:
1d:cc:6a:41:da:c7:8a:7b:d0:c8:8c:1f:4f:3e:4d:1e:48:1a:
0d:28:67:d3:1c:1e:22:8a:9c:1f:1a:01:67:c4:d2:12:86:ab:
16:5c:48:d4:13:bf:c1:fd:2b:2f:97:21:2c:dd:88:b4:ad:40:
35:da:45:cb:9b:be:6f:32:d9:df:41:d3:86:f1:74:07:bb:b1:
ca:62:3c:1b:24:5d:34:e7:16:5c:a8:e5:1a:78:92:cd:ff:18:
d4:42:26:1f:ad:19:7b:64:bf:fe:0a:52:4b:c4:8f:a6:5c:b0:
7f:32:b8:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:38:02 2026 by rpki-client