
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTP2K5EGMdBJTKzEfLFnxYEEUAY.cer
File: GTP2K5EGMdBJTKzEfLFnxYEEUAY.cer (raw, json)
Hash identifier: NYje3SgbQyLTk+ipv6x9QPA4AjW9EjNbOsNczA5Nk+0=
Subject key identifier: 19:33:F6:2B:91:06:31:D0:49:4C:AC:C4:7C:B1:67:C5:81:04:50:06
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D00B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 26 Aug 2026 13:01:04 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 132014
IP: 103.69.234.0/23
IP: 2001:df3:6600::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 12:42:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184331 (0x2d00b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 26 13:01:04 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A9160827, serialNumber=1933F62B910631D0494CACC47CB167C581045006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:a0:a3:ae:58:6e:51:6b:7b:c0:f3:7d:3b:
3d:db:b3:ac:8a:ed:b1:b0:2e:03:52:2c:43:d3:5f:
43:18:22:5c:b9:11:97:b5:fc:54:97:60:01:49:66:
a1:fd:f3:db:78:50:36:a6:d3:22:98:e3:65:4f:a8:
2b:57:63:fc:6e:79:c1:c9:ea:3c:f5:3d:49:36:d6:
27:29:9d:01:a1:a1:f9:d1:dc:8c:a9:c0:a9:f4:bc:
fe:2d:47:74:5f:6b:7f:4b:37:1f:fd:ea:47:f0:01:
17:b3:65:21:ef:bc:65:6a:fc:f1:e5:72:ca:6e:5f:
e0:5a:92:4b:5d:e1:db:f3:f4:e1:17:65:15:44:5f:
1a:e9:e6:60:7e:f0:47:49:3c:0c:5e:0d:48:37:6f:
bb:64:e3:e5:09:68:9b:3a:5e:7a:2d:a6:ee:0d:5e:
83:18:f3:c7:58:76:d3:30:62:e9:bd:39:38:0e:bd:
51:78:3d:ca:24:bd:28:da:68:22:5e:6f:7a:8d:54:
6a:db:f1:51:18:d3:30:50:19:ef:97:bb:92:a4:38:
ee:fa:07:5d:d8:e3:b2:ac:09:4c:16:fc:d9:29:25:
79:07:93:f2:f5:66:08:f5:94:af:b9:b4:a7:e2:71:
db:65:39:09:20:95:31:39:bc:0b:30:d4:ab:76:ca:
66:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:33:F6:2B:91:06:31:D0:49:4C:AC:C4:7C:B1:67:C5:81:04:50:06
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9160827/9653CCBC6B8E11E69E7C7554C4F9AE02/GTP2K5EGMdBJTKzEfLFnxYEEUAY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132014
sbgp-ipAddrBlock: critical
IPv4:
103.69.234.0/23
IPv6:
2001:df3:6600::/48
Signature Algorithm: sha256WithRSAEncryption
3b:c2:2e:8b:b2:2d:3d:bd:47:87:89:05:c4:80:6a:9a:02:b4:
67:4d:2c:6f:22:c5:cb:32:4d:20:3b:a3:ad:f1:c0:70:66:e5:
1f:dc:c1:e7:6f:95:bc:b2:d6:47:8f:2a:b6:53:60:d7:9d:be:
ca:ed:fe:fd:d2:ca:03:93:08:0d:b7:7f:a7:7c:a9:36:df:4d:
51:8f:9a:c9:ff:10:4e:16:d9:08:ef:85:6a:4a:7b:7a:59:08:
94:06:46:ec:f9:7a:41:ca:cf:8d:74:13:6a:bc:1a:2e:dd:f5:
33:71:92:0e:c2:81:21:90:51:a7:bd:e9:f1:67:e4:cc:ac:3d:
6e:bd:3a:0e:76:cc:7c:fd:d8:bb:3e:2e:a2:ec:f4:d4:00:b2:
03:a6:45:30:68:4f:ee:1f:d5:bf:73:96:c0:b9:ae:d3:4e:44:
3e:ff:d0:d6:bb:00:e4:57:c2:29:34:87:99:8b:d6:28:0d:2d:
36:65:e1:f9:ab:d7:e2:c2:6d:98:09:17:53:ed:14:7d:18:1b:
b3:37:cf:60:58:69:7e:e6:bf:2e:76:17:d3:5e:1a:53:ac:53:
27:a9:1a:49:48:82:da:52:25:3a:9f:9a:a0:1b:1a:33:24:78:
35:db:9d:f1:20:da:81:f2:ee:b6:4f:ff:3e:41:af:b4:5e:c9:
35:17:01:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 5 15:38:52 2026 by rpki-client