Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer
File: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer (raw, json)
Hash identifier: 0H1EyWP1RziMRB/fO51Se3WxGx9rgDomoh67FRkjKHI=
Subject key identifier: 64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 028901
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 27 Jan 2026 14:19:44 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 138479
IP: 103.126.192.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 12:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166145 (0x28901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 27 14:19:44 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91CE0FB, serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c3:e7:ec:c7:8c:11:48:d5:c0:f0:82:b7:01:
30:a1:68:f7:2c:7d:79:27:1b:21:f4:8b:cb:90:48:
47:10:cc:76:dd:98:09:3e:51:f7:5b:61:fb:7d:2c:
64:94:49:07:e5:8e:e0:9f:73:3a:a1:dd:01:91:d0:
d6:22:ed:77:5f:81:54:4c:4b:84:25:d8:34:49:9d:
05:f6:71:73:61:28:a7:ba:29:64:83:5f:4f:b0:29:
8a:93:c7:b1:29:88:e1:29:a1:11:b7:38:26:2d:72:
90:99:2f:7a:06:d8:95:b8:1d:16:90:21:9b:1e:16:
62:f7:54:7a:13:0d:46:84:84:fa:a7:1b:44:69:47:
1f:19:06:f2:dc:18:36:12:d2:0e:93:e5:66:10:4e:
b8:5d:28:c1:fa:ee:8c:20:e0:43:09:c5:bf:a8:35:
13:17:35:b4:da:6b:e0:f4:c4:21:ed:ba:40:bc:1d:
23:8e:87:32:ac:c1:dc:13:66:b9:7e:cc:44:43:d5:
ed:6d:1d:15:88:6f:64:e7:c5:0b:c3:c4:90:7b:ea:
0e:3b:30:b8:29:12:95:7d:a9:00:9b:52:28:da:a8:
1a:f7:83:fc:3e:9f:dd:ec:61:80:6e:ce:9a:d7:53:
a8:a9:52:48:15:05:49:65:af:d9:d2:2c:99:0b:85:
94:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138479
sbgp-ipAddrBlock: critical
IPv4:
103.126.192.0/23
Signature Algorithm: sha256WithRSAEncryption
28:4f:fc:31:55:f6:bd:93:58:55:f0:a9:69:40:9c:e7:04:2b:
d8:e2:a9:26:54:01:a3:e7:19:2e:46:5c:c8:bc:f7:45:9c:6c:
8f:d5:f5:13:f4:90:c8:d0:d2:8f:d5:d5:f3:e0:02:ae:52:62:
ef:94:c4:2e:cb:a8:01:a0:b1:2e:62:08:94:36:48:3a:87:a1:
12:91:48:dd:03:c4:91:a7:f6:5b:e7:cf:9b:0b:af:f0:ef:7c:
25:df:54:2d:c9:aa:5d:e7:5a:8f:d8:e3:3e:ae:bb:54:ae:f8:
6d:65:b7:71:57:22:be:38:8a:ed:cb:34:46:48:a4:11:3d:25:
23:08:e4:f6:69:00:16:92:8a:2d:55:df:b8:2d:55:36:dc:89:
0a:a1:9c:f9:73:60:8e:1d:ad:09:2e:ed:c3:96:b1:a0:95:7f:
6e:f2:7c:3b:c1:8f:fc:8f:dd:31:22:92:47:83:3f:2a:cd:93:
da:9e:36:ca:fb:fd:12:61:f4:b5:df:84:8b:21:1c:da:e6:8a:
cf:39:ff:96:43:e4:fa:7a:93:76:f6:e9:f4:7c:b2:e4:0d:d6:
ed:12:cf:d6:2b:46:72:6a:6c:0f:c4:b6:ea:a1:be:88:de:2d:
08:d4:88:a7:5a:bb:c3:7a:4b:9e:57:5f:79:bd:1b:ec:20:ec:
54:84:9f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:08:03 2026 by rpki-client