Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.cer
File: zN5Fgw42Z1mJ9l0NlOxL2kECNYU.cer (raw, json)
Hash identifier: cWOTCCK6c3HrRdneQD1J2tYaP2pqJivsE8rFYtCEgUA=
Subject key identifier: CC:DE:45:83:0E:36:67:59:89:F6:5D:0D:94:EC:4B:DA:41:02:35:85
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D6A9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9118278/7C7D07D2B25411F1B2211E0E6911F970/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9118278/7C7D07D2B25411F1B2211E0E6911F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 17 Sep 2026 04:59:00 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 138639
IP: 103.135.107.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 12:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186025 (0x2d6a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 17 04:59:00 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9118278, serialNumber=CCDE45830E36675989F65D0D94EC4BDA41023585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:0a:ef:c7:c9:57:93:2f:df:be:48:f1:b1:
61:24:f1:68:e7:6f:50:ae:8f:13:ec:a0:14:6a:d5:
f0:07:aa:e6:8c:f2:58:c6:e6:83:07:6a:84:ae:3d:
45:fa:c9:9e:32:58:94:eb:fc:ab:f8:48:e0:22:5d:
87:d9:66:c4:14:ce:f6:60:90:4c:32:01:05:a2:1d:
f4:21:5f:5d:33:43:f6:25:8c:16:d2:22:f3:af:c5:
f7:2c:ff:3c:99:3e:ad:a6:c9:dd:03:4a:8a:38:12:
58:5d:91:59:73:b8:80:ca:6f:de:dc:a1:8a:2c:e2:
95:20:7a:1c:c1:47:f6:64:d5:34:ad:c5:7d:d8:9a:
1c:c7:9f:0f:d5:53:fe:9f:0a:84:ec:0e:b1:fc:bb:
18:74:f9:61:db:27:e1:a3:24:e6:3f:2f:93:01:58:
6f:d7:33:b0:bb:4f:4d:c5:fe:00:11:20:9b:14:4a:
e5:55:b5:50:e4:e4:3c:43:3d:57:47:01:73:a4:ff:
aa:d8:f4:37:70:e7:55:a5:ec:ee:17:70:55:28:41:
42:f3:e2:31:cb:73:f3:a3:8b:06:cf:f1:1f:af:c5:
a2:da:69:e5:0f:b2:5a:95:6f:30:8e:a8:ac:51:24:
1d:83:16:45:f0:73:6a:1d:00:e6:8a:19:cb:e8:56:
e1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DE:45:83:0E:36:67:59:89:F6:5D:0D:94:EC:4B:DA:41:02:35:85
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9118278/7C7D07D2B25411F1B2211E0E6911F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9118278/7C7D07D2B25411F1B2211E0E6911F970/zN5Fgw42Z1mJ9l0NlOxL2kECNYU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138639
sbgp-ipAddrBlock: critical
IPv4:
103.135.107.0/24
Signature Algorithm: sha256WithRSAEncryption
45:12:c8:24:63:41:5c:3e:89:ea:0f:d8:5b:f7:06:2a:4d:8f:
69:03:1a:0a:65:9f:35:eb:fd:67:56:32:8e:7e:d0:72:7f:1a:
f7:19:47:97:2c:0a:43:82:23:97:78:da:9a:15:a9:cf:37:36:
a0:c1:8e:37:29:f0:f9:29:67:82:51:df:63:f3:c0:da:9b:cd:
47:f4:74:fb:04:00:c4:36:2b:de:83:0f:2b:7e:dc:c2:d9:a0:
34:d5:93:87:98:a8:78:ec:ef:b6:da:c2:57:9e:4a:06:63:2e:
68:e1:ca:a6:6f:05:0c:d7:4a:fd:43:35:bb:84:8c:90:1d:b8:
c6:5f:b3:2c:73:c3:cc:ea:5c:2f:82:86:88:c7:d6:cd:ef:3d:
0d:8c:9a:7c:e3:d8:3f:da:7e:c4:59:2f:7b:5b:1a:b6:0e:5d:
bf:e5:6b:ff:9b:fa:18:eb:8c:27:5a:85:93:4e:33:b3:59:17:
fd:bd:89:08:1d:48:a7:81:de:c8:55:ca:b5:5a:0e:1a:7e:6a:
fa:4c:ac:a6:43:61:c1:2f:c7:e4:ef:24:ce:e2:fc:84:cc:8a:
c2:06:e9:c9:b4:47:f1:28:c6:aa:13:24:ab:1f:bc:76:e2:4a:
6c:53:da:bc:a4:9d:7a:0c:a3:d2:e2:18:80:81:c2:42:01:75:
01:00:c1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:27:00 2026 by rpki-client