Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer
File: Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer (raw, json)
Hash identifier: PG0PgQLBC4WMjY6K6W2tC1zFqxWQDymv0X7NOUsBuSg=
Subject key identifier: 37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DB0B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 02 Oct 2026 12:23:09 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 133866
IP: 103.76.44.0/22
IP: 116.206.88.0/22
IP: 2407:6280::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 18:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187147 (0x2db0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 2 12:23:09 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91142EA, serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fb:4c:7d:1e:7a:3a:12:cc:bd:05:ae:a2:36:
31:45:4a:1d:d0:02:79:01:61:2a:44:ba:80:84:d2:
9e:01:9f:37:f5:7a:05:45:1a:56:0b:65:2c:44:53:
cb:fa:df:b5:97:c3:24:1a:7b:af:fd:04:f5:f2:63:
a4:b6:2f:1e:18:4f:35:4a:f4:b6:49:f3:96:36:4c:
88:68:bd:b5:ff:6d:5b:fb:6b:fe:c0:19:3a:b2:b1:
f8:70:4f:6b:2f:3d:f1:ce:c8:95:9e:3f:41:26:d2:
06:ac:84:98:33:03:3e:ec:bc:28:1f:c6:c0:fb:22:
b4:93:af:6d:9d:06:f7:ae:2b:bb:86:4a:f2:6f:1a:
ef:b0:21:20:ae:f1:77:af:7b:68:14:e7:69:20:8b:
15:85:df:cb:2e:6d:5a:06:28:f7:f4:10:11:d5:c1:
1b:22:76:0a:64:82:69:10:55:c6:60:dc:50:b1:6d:
ef:52:c1:9c:82:64:fb:69:2e:44:5d:bb:80:61:84:
01:bd:b0:5e:f3:d3:1c:d2:49:1c:35:a1:41:9d:81:
ee:2b:41:fd:bf:66:f6:7d:e5:2a:fa:90:a1:e6:5c:
05:8c:b7:d9:59:75:f0:bb:a3:ba:ee:df:bc:23:e8:
4e:0d:29:95:6b:3d:64:e9:a5:30:38:b9:9a:e2:ee:
c7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133866
sbgp-ipAddrBlock: critical
IPv4:
103.76.44.0/22
116.206.88.0/22
IPv6:
2407:6280::/32
Signature Algorithm: sha256WithRSAEncryption
9f:55:81:76:64:ed:6e:7a:b6:18:10:e2:45:4b:9c:53:41:f5:
fc:70:e6:dd:c0:18:96:6c:de:a5:ce:f8:9d:0e:4f:d5:24:cc:
01:c9:fe:dd:3f:63:22:5c:cf:73:4c:e7:b9:44:d6:a9:aa:01:
dd:95:a1:4e:d4:57:f6:5b:f4:49:00:73:09:12:89:cc:aa:d1:
e4:28:30:33:b2:9d:bd:dd:5a:f0:b9:4a:da:55:36:10:35:4d:
c2:1c:5e:e6:df:7d:77:79:2f:43:ee:8d:06:02:7b:e2:a4:19:
65:9a:15:bf:0a:9c:00:e6:fa:8a:b7:1e:ff:d1:5d:a8:27:a6:
58:bc:eb:4b:84:74:04:d4:c3:f1:2e:7c:e2:00:80:a6:00:51:
f6:55:a5:37:60:8d:39:a5:d1:53:69:19:be:38:36:c7:54:d5:
ea:a3:be:cb:34:d4:da:bc:ed:70:61:57:53:51:36:1a:4f:1b:
45:2b:13:12:02:3b:0e:06:2a:c9:a5:12:5e:58:b5:4c:c3:88:
da:47:d9:6e:5f:c9:8b:d6:57:c8:85:62:24:1a:cf:0f:b0:e0:
47:78:e6:1b:50:01:3c:bb:7e:6d:fd:74:11:b9:e0:a2:bf:fe:
62:36:ac:d9:c2:63:97:47:5b:5c:9c:31:c7:34:12:96:9a:20:
ad:77:27:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:09:49 2026 by rpki-client