Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer
File: LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer (raw, json)
Hash identifier: 4heWkk1f2XgXpgTCks1vox3ZlxBNUaPCfGqSSD4mXkY=
Subject key identifier: 2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B711
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 26 May 2026 13:09:51 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 137816
IP: 103.114.192.0/22
IP: 2402:d1c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177937 (0x2b711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 26 13:09:51 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A9153D75, serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:c2:88:11:55:d0:94:9d:69:a3:e3:cb:22:
65:ec:4b:b7:89:91:d7:46:a0:72:60:e0:5c:3d:32:
02:17:a0:6a:a0:1d:6d:be:d3:68:3b:a8:3c:4e:c7:
70:5d:d5:8c:9b:97:38:e3:a1:ed:43:af:ed:c3:89:
76:2a:34:bd:5a:9d:75:c4:27:2b:3e:98:95:8c:b4:
33:3d:67:e1:19:97:99:0a:fd:f2:5a:9e:3c:cd:68:
21:2a:8d:50:3f:70:54:79:42:62:ba:0f:17:bb:29:
e5:34:32:b3:cd:20:85:84:14:04:49:4a:83:e9:ed:
50:57:97:85:58:10:6b:9f:7e:3b:e8:f0:26:a2:fd:
eb:e3:06:0a:2c:2d:57:7d:9f:2a:82:71:83:42:f7:
12:ae:04:8b:14:55:29:a2:cb:c6:b9:b1:f9:64:96:
4d:d8:f6:34:a0:4b:a6:41:c1:cb:4f:85:50:08:63:
7c:29:1e:3c:84:96:6f:0e:97:fa:0b:97:98:7b:eb:
d6:10:6b:c4:74:0c:c2:05:ed:df:29:2e:50:bf:5b:
cb:83:8a:b4:0c:ff:cf:0c:d1:4c:f2:4b:24:0d:7a:
52:d2:93:7e:a8:b8:97:ab:09:44:29:d8:1c:e5:87:
9a:d4:ab:12:3a:c3:1f:0a:6c:28:e6:e7:b4:3a:c2:
c9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137816
sbgp-ipAddrBlock: critical
IPv4:
103.114.192.0/22
IPv6:
2402:d1c0::/32
Signature Algorithm: sha256WithRSAEncryption
2a:ee:cc:94:25:8e:6a:84:60:42:80:ee:93:52:91:29:dc:81:
65:7f:ce:22:7a:52:96:4f:6c:3f:66:ec:e7:a6:49:d6:f6:51:
1e:d4:ae:0d:a4:53:cc:b7:71:14:cf:87:51:e1:16:d0:d6:65:
a6:2f:26:63:48:92:87:76:85:15:64:73:91:ec:00:04:80:db:
b0:45:46:04:e2:7b:bb:d5:a1:91:34:bd:e3:00:a9:06:e2:c6:
ce:ed:bc:f2:2b:ef:b1:0a:84:68:d7:9e:a1:99:6b:c2:19:bb:
f6:f9:c2:26:72:95:54:1a:e6:3b:dc:54:09:93:4f:a2:11:13:
cd:c7:74:17:33:d6:91:cf:63:ee:de:8a:9b:dc:45:82:ae:9f:
c9:f9:7f:36:a5:7f:28:2f:09:1a:6c:1c:37:a5:0e:e7:b6:e1:
86:07:06:e2:7a:c9:e9:c0:5b:26:73:86:1d:54:2c:f3:1f:18:
52:ec:74:85:1c:52:27:6f:f0:3b:b1:42:16:a8:6c:bd:c3:32:
c4:aa:fa:0e:c0:32:b1:cb:a1:2a:6f:ee:06:d5:b3:1b:40:00:
d8:8b:27:b9:ae:75:1f:9a:be:8c:3c:14:b8:a5:68:de:62:8c:
74:d3:d5:85:75:00:f3:6e:02:a6:7c:e3:4e:c8:a6:76:2f:87:
22:aa:1a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 02:21:15 2026 by rpki-client