
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
File: gBcCvJze9z33Ob-31L0ve4iF4Hc.cer (raw, json)
Hash identifier: UsO6AVL2kSW/TUgGHOTOcMqDyl3eCkLyIrbRxwg3SsE=
Subject key identifier: 80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A381
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 10 Mar 2026 12:34:44 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 142127
IP: 103.162.136.0/23
IP: 2407:1940::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 22:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172929 (0x2a381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 10 12:34:44 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A9124731, serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:b9:af:fc:26:45:ca:7b:7b:4c:92:a1:ae:
9a:77:3e:87:8e:9e:ec:9d:cd:8e:26:c2:17:a2:3a:
82:42:5b:7d:81:ec:e0:77:27:0c:07:18:2e:72:3b:
6b:de:11:ec:20:78:5d:02:f4:b2:a2:51:b3:10:05:
fc:07:e4:dd:2f:7d:e2:64:da:ca:c6:b7:f5:73:47:
c9:49:93:7d:60:e4:8a:77:e7:2e:c2:1b:e4:43:42:
36:fe:3c:75:55:e6:e5:5e:95:43:2a:13:32:1b:4b:
a8:f7:7d:78:3c:39:12:dd:37:e5:aa:ac:b8:ee:26:
9e:93:e5:dd:99:08:e7:2a:73:f5:e4:74:85:a9:b4:
ca:ac:6f:35:20:3c:de:75:16:82:35:ef:9c:0d:bd:
83:e3:2f:cc:e8:89:85:b0:df:82:f0:49:cd:cf:51:
ab:44:62:71:b9:1d:e9:2a:ca:80:d7:85:af:3a:0b:
b8:8a:85:f0:e2:63:72:f7:1d:9d:ee:b1:e3:43:69:
84:79:23:43:dc:8b:a1:45:7e:05:40:0c:c5:4e:37:
4a:a4:e4:e7:a5:af:aa:a7:dc:2a:7a:60:80:e1:60:
cb:9f:7d:a0:5d:e9:c5:a7:a8:3e:50:be:22:84:74:
60:77:d7:61:0c:f4:da:3e:c9:a8:5a:37:70:c8:b3:
95:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142127
sbgp-ipAddrBlock: critical
IPv4:
103.162.136.0/23
IPv6:
2407:1940::/32
Signature Algorithm: sha256WithRSAEncryption
73:f9:eb:88:81:d1:2e:9d:b3:cd:37:ae:52:c2:35:27:3b:85:
fb:0c:70:ba:0d:12:d6:ea:42:a7:ef:37:29:9d:38:72:4b:25:
3c:68:10:dd:32:bb:82:d9:2c:0e:db:37:d1:7f:14:13:69:94:
2e:98:40:b9:a6:65:26:d1:ed:f3:b1:84:71:d5:a9:40:51:d0:
33:0c:af:59:58:d7:82:24:a0:19:b3:30:41:17:28:9e:b3:8e:
19:1a:da:eb:1b:36:98:55:ed:15:1d:dd:96:c0:39:d2:34:08:
47:79:73:1e:03:03:0e:5c:c4:f6:2f:70:f4:6a:cd:7f:55:20:
25:53:f0:a1:d5:a5:2b:8d:b2:5b:59:ce:d2:8b:b5:b0:44:38:
44:04:57:b8:cd:4f:08:81:06:22:00:2f:b8:a4:8f:88:54:22:
5c:5c:8a:2f:d1:d9:09:a3:11:59:75:70:ec:69:d8:4d:04:4b:
32:32:31:55:e3:af:28:6b:09:d6:73:b8:36:e7:02:f8:47:c3:
50:34:89:de:fe:c6:93:50:03:07:cd:6e:a2:b0:84:93:15:70:
c7:42:20:1d:ec:c7:9e:cb:c1:3b:89:c6:78:36:35:f5:40:b9:
ad:38:5d:ee:56:d4:1a:57:79:ba:3d:05:3c:51:4b:d4:cf:14:
7f:4c:59:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 02:19:13 2026 by rpki-client