Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
File: GkAQC15dw00ay1htJzOQptUXff8.cer (raw, json)
Hash identifier: i4OyjrGTzYzg48cH1ayooqh8HsAbbF6TpJ1Ro3eoSM0=
Subject key identifier: 1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A689
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 26 Mar 2026 13:52:31 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 138432
IP: 103.181.132.0/23
IP: 2001:df0:6ec0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173705 (0x2a689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 26 13:52:31 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9194C99, serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a1:63:23:c3:d8:da:eb:52:5e:6d:e6:14:98:
8b:17:fc:31:b9:a9:81:9b:6b:78:8c:bd:25:75:da:
73:f1:89:56:f0:dc:5b:88:a2:de:d2:48:fd:99:76:
56:23:d3:c1:73:fc:62:77:82:d5:87:3c:f2:3b:cd:
34:ce:97:f3:af:ee:6c:bd:04:d7:6a:45:70:75:b9:
69:a3:17:12:91:5a:4c:d9:c0:66:e4:9d:37:e7:a4:
d6:d8:cf:b7:89:8b:32:d4:3e:09:56:24:87:c5:98:
72:07:30:a7:8d:eb:c0:92:54:43:d6:bb:5e:53:ad:
c4:97:ab:d7:e9:9e:92:c8:f2:7d:6e:b5:d4:55:4a:
7f:ac:31:57:90:94:31:3a:50:c5:ee:8f:84:fa:11:
b4:9f:aa:26:73:ee:67:99:4b:2e:2e:b9:09:d7:aa:
93:63:7d:d9:a0:4d:13:af:3c:28:8f:04:c1:e8:cc:
e7:bf:69:19:24:96:ba:8e:58:6b:b0:55:cf:1c:9b:
c0:83:44:3f:a6:5d:e8:e2:b1:e8:30:5c:4b:40:96:
48:12:57:8f:3d:2e:ae:e3:94:12:87:85:29:dc:12:
ca:eb:c2:65:de:e0:aa:36:66:f3:17:5f:12:82:95:
b2:76:fe:21:47:dd:d8:d6:5f:71:b5:4c:58:ad:54:
e0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138432
sbgp-ipAddrBlock: critical
IPv4:
103.181.132.0/23
IPv6:
2001:df0:6ec0::/48
Signature Algorithm: sha256WithRSAEncryption
cb:46:ba:fa:65:b0:ee:7a:88:72:6b:bf:65:c5:7c:1f:49:dc:
1c:fc:67:d1:60:88:34:af:9b:57:2d:39:33:ee:3e:4c:bb:c9:
34:52:92:3d:29:48:c7:65:0b:e0:a4:09:c3:db:87:49:71:08:
da:46:6c:99:17:0a:9c:9b:1d:8c:a4:bf:37:87:c4:4a:d7:69:
69:89:4a:35:93:9e:c5:82:43:08:b1:aa:2f:16:fc:51:a1:21:
b5:4c:d2:ec:5e:6d:e2:c1:e8:ae:22:b6:eb:63:f9:73:57:a4:
88:81:e5:ad:69:00:03:b7:38:91:ce:37:22:fe:8d:1d:78:18:
ea:30:16:0d:de:fb:86:80:52:a7:3c:5e:ec:34:72:36:a5:ca:
27:f1:91:7a:89:9c:23:32:89:6a:3f:b8:b5:08:be:fb:eb:33:
69:af:4e:64:5f:8c:53:57:d5:ee:95:4d:a9:c2:a3:a8:25:16:
4e:76:6e:04:1d:31:2d:4a:70:d9:ae:c7:bd:66:5d:73:64:f9:
c0:37:de:ac:c4:ed:29:8d:52:8a:90:a6:ea:29:0a:6d:bb:24:
f1:f7:d5:f2:c8:99:e5:79:de:12:fd:6b:4b:89:27:65:8c:21:
4c:16:bf:ec:56:c1:ec:4e:78:cb:04:dc:76:26:80:c3:76:c0:
6b:58:10:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 6 07:10:46 2026 by rpki-client