Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60Y5e044RmfgPE26UHVUDwA30bg.cer
File: 60Y5e044RmfgPE26UHVUDwA30bg.cer (raw, json)
Hash identifier: GI7DnvNN/6Z4RKIa3c/YUYQCfcxLwhhFoI/5JVz/sL0=
Subject key identifier: EB:46:39:7B:4E:38:46:67:E0:3C:4D:BA:50:75:54:0F:00:37:D1:B8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A723
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 29 Mar 2026 08:52:57 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 136394
IP: 103.86.112.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173859 (0x2a723)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 29 08:52:57 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9176DA8, serialNumber=EB46397B4E384667E03C4DBA5075540F0037D1B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fe:fe:90:95:76:fc:ca:2a:7c:6c:09:cb:7a:
46:95:52:82:9e:5c:80:4c:e9:e3:fe:60:fe:2d:a7:
ec:3a:84:6e:3c:7b:d6:14:8f:86:d7:b0:36:44:38:
d2:8e:55:81:87:ea:49:52:9d:23:46:87:39:23:9a:
96:51:c6:e4:5f:ac:c1:12:8d:6e:19:94:97:99:32:
29:7f:db:4e:d6:cb:a3:e4:a6:e0:58:02:bf:be:76:
bc:2b:d4:08:cd:6a:7d:1e:3b:50:f6:3a:a2:cd:32:
fb:ab:71:a7:dd:78:c3:06:45:fa:71:b7:2b:25:f2:
b0:ff:e8:71:f8:85:d8:57:6f:c2:16:6d:c1:d0:42:
95:28:0c:dc:a5:b2:f2:fe:92:a3:75:09:ad:00:9d:
be:24:32:42:87:b6:86:7c:91:5f:1a:4d:84:20:8e:
2f:a8:8d:1b:e6:25:80:b8:d8:da:c9:79:7f:34:3d:
05:42:cf:2a:ad:ce:31:5f:ce:48:c0:1c:6d:2f:2a:
fd:58:76:e4:e3:39:1d:53:26:fd:29:d8:55:17:a5:
02:89:f0:61:df:b4:07:3f:bb:09:28:b3:bd:2a:5e:
86:54:22:76:86:9a:fd:d4:61:9f:1c:da:a4:88:05:
f1:9a:f0:44:64:32:4c:0a:ef:c9:ea:6c:2d:da:31:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:46:39:7B:4E:38:46:67:E0:3C:4D:BA:50:75:54:0F:00:37:D1:B8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136394
sbgp-ipAddrBlock: critical
IPv4:
103.86.112.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:e0:fc:c6:e9:0f:8c:4c:57:42:9e:11:74:6e:1d:c4:71:52:
f5:ae:e1:af:6a:ee:bd:36:df:02:9a:a7:65:de:d0:af:7f:51:
bc:02:1e:db:3a:c1:e7:23:b4:4c:99:af:4a:a8:3b:3a:34:6a:
5e:96:be:e6:8f:b3:dd:36:58:4e:72:d6:bf:e1:45:5f:a7:f2:
4b:54:8a:91:1a:e4:65:8c:50:f0:03:e6:2d:a6:eb:4c:e4:c2:
b1:29:7f:32:f1:bf:2a:4a:9a:e5:fe:a1:bc:45:91:94:31:a0:
c2:67:dd:dd:ed:4f:01:5e:d8:ec:db:a8:58:72:9f:de:53:e6:
c8:26:90:24:60:b9:eb:4e:24:41:89:b3:f2:64:0e:8c:f4:bd:
ba:2a:0f:88:80:10:9d:52:b3:63:a6:a6:04:9c:b2:b0:ce:8b:
27:77:91:8f:7e:37:a7:60:94:be:24:05:ea:79:b9:be:57:f3:
ed:0e:80:04:fe:6e:ba:fe:d6:84:a2:5c:78:ec:b2:6b:f5:ba:
16:0b:27:77:8a:c4:c5:ba:28:91:93:3d:98:30:b2:9a:c7:8f:
56:d4:0f:33:3f:a4:11:6a:00:00:58:98:5c:b1:c6:d3:bd:28:
1d:d5:90:3d:20:f6:e6:14:21:09:0e:5a:30:87:0e:c8:08:ab:
20:ec:7a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 18:28:06 2026 by rpki-client