Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iun22tPXFTlkJupCcR5FFZ3lSM8.cer
File: iun22tPXFTlkJupCcR5FFZ3lSM8.cer (raw, json)
Hash identifier: 55NAzrBWbfO6DHcGVo/L8XaLy/sKhCLS/EPQ3mbX8jg=
Subject key identifier: 8A:E9:F6:DA:D3:D7:15:39:64:26:EA:42:71:1E:45:15:9D:E5:48:CF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DB02
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915FBD7/55E42EE0BE4111F19F25B4B86411F970/iun22tPXFTlkJupCcR5FFZ3lSM8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915FBD7/55E42EE0BE4111F19F25B4B86411F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 02 Oct 2026 09:12:08 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 138507
IP: 103.127.88.0/23
IP: 2001:df7:6500::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187138 (0x2db02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 2 09:12:08 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A915FBD7, serialNumber=8AE9F6DAD3D715396426EA42711E45159DE548CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:49:06:68:25:a2:f2:dc:47:3d:90:f5:2a:
3e:26:85:ec:2c:43:bf:31:a6:48:1f:a2:65:89:a9:
4c:62:b9:ea:6e:79:c4:5f:f8:de:7f:86:bd:e9:36:
c3:20:eb:57:f9:cc:bb:f6:fc:ed:a5:ff:67:fe:2f:
20:74:6b:0a:47:b2:81:53:7e:23:b9:c4:19:97:42:
6b:8a:54:2f:33:6c:62:f7:e1:ae:f8:e4:c2:3f:5b:
47:11:1d:67:68:1d:62:39:8f:64:5b:30:ff:eb:24:
fc:d6:df:08:56:38:12:d6:2d:7e:3b:54:e0:40:24:
72:f3:48:0b:5c:86:24:a9:9f:1b:67:33:1e:02:26:
f1:77:41:aa:42:c4:eb:8f:30:f5:d1:06:3d:b3:70:
f6:d4:21:f8:5b:cb:15:aa:8f:42:e5:85:b4:fe:ab:
3f:93:bc:68:b6:e6:45:65:20:91:b1:19:50:5b:5c:
77:0b:fe:8d:5b:d1:f3:58:bd:d6:ca:ff:75:76:37:
43:cc:4a:e5:e4:55:c1:a2:7b:c1:47:79:cb:0a:13:
fa:fa:5f:b5:00:d1:1e:c1:95:5f:a0:9a:f7:3b:a4:
b4:4a:31:34:2c:5c:fa:7c:2e:8b:cf:0b:b4:49:a9:
35:79:5e:d5:b3:6f:ff:aa:f0:5e:a0:58:6a:21:05:
d2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E9:F6:DA:D3:D7:15:39:64:26:EA:42:71:1E:45:15:9D:E5:48:CF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915FBD7/55E42EE0BE4111F19F25B4B86411F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915FBD7/55E42EE0BE4111F19F25B4B86411F970/iun22tPXFTlkJupCcR5FFZ3lSM8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138507
sbgp-ipAddrBlock: critical
IPv4:
103.127.88.0/23
IPv6:
2001:df7:6500::/48
Signature Algorithm: sha256WithRSAEncryption
38:66:d0:ee:89:63:2f:86:91:17:46:fd:5b:65:83:03:27:72:
12:3d:ff:06:98:91:0d:ca:3e:b4:0d:52:92:88:ec:9f:ab:94:
83:66:ba:76:46:50:a5:75:fc:94:b7:56:dd:1e:9f:05:1c:a8:
a7:04:0f:5e:90:8e:9f:40:8b:63:14:5d:be:ee:84:dd:46:23:
5b:a3:49:87:75:7e:4f:63:0b:14:fb:f8:f7:ff:45:1b:89:32:
25:91:0b:00:4e:f4:30:a1:2c:59:86:08:f7:ae:df:f6:f1:75:
15:f1:db:8c:8e:94:c9:a1:b2:ec:2c:b8:bd:16:ef:db:f4:b6:
64:95:6c:37:83:f5:7c:7e:a6:9a:69:56:bd:79:77:47:7b:60:
79:a2:0f:11:77:89:88:d0:b9:6d:65:bb:84:a5:9a:72:aa:df:
20:29:d8:e0:7a:ce:9b:ba:8c:c7:8a:15:f7:fc:a0:f3:8e:35:
c7:6a:8e:1a:b5:c7:c2:bf:fd:bb:eb:5b:ca:3a:02:b9:d6:5e:
2b:86:9d:89:91:31:70:75:ad:bb:50:30:35:dc:12:88:cc:55:
80:01:7f:99:55:40:23:dc:17:9b:4d:e8:de:b7:5e:66:bb:cd:
b4:c4:ba:63:64:93:98:b3:f7:e4:8b:7f:c0:1c:4b:0f:7f:cb:
2e:03:b4:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 7 05:57:44 2026 by rpki-client