
Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer
File: lCSgucmNtjIaU5IMb0410jGc9G4.cer (raw, json)
Hash identifier: sgTFBWc2nEnOs3tPZg/PaQJxleJXgPoRHha3yNcqbqM=
Subject key identifier: 94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C9E7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 01 Aug 2026 10:33:29 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: IP: 103.27.244.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 20:21:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182759 (0x2c9e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 1 10:33:29 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91FB642, serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ec:5a:3a:68:ac:28:78:e6:00:03:16:f0:7c:
21:f2:f7:1d:00:16:80:a8:14:85:be:0b:6e:22:6c:
bf:cd:8a:7a:f2:99:4f:ff:38:07:60:5f:97:c7:3d:
d0:a8:c6:bc:cd:16:91:1c:cf:5b:14:7f:2a:4c:f0:
93:84:8c:9a:f8:99:ca:bb:3f:95:80:6b:b3:7b:36:
22:83:48:48:09:dd:82:42:2d:8f:f6:5a:65:e9:fa:
f7:86:f0:69:56:f0:cb:da:30:a4:54:ed:b5:1f:d0:
07:8e:7f:bc:56:72:df:3e:95:32:50:9c:0e:19:9a:
9e:ac:6c:f3:5d:db:c4:27:29:be:76:12:2f:c8:90:
2f:e4:ee:14:f0:7f:71:8d:01:a3:c1:2d:9f:20:83:
f1:a4:7e:dc:f0:c9:63:a1:4c:b5:1b:40:9c:31:84:
74:d4:3d:93:8c:df:94:8f:5f:0a:38:8c:36:c6:8b:
a3:1a:bc:40:27:64:3a:3e:c0:6d:8e:8f:57:3c:1c:
b0:b1:c2:b4:77:1e:38:0d:46:60:0d:99:80:de:63:
ce:da:ad:3a:9d:67:84:f0:1f:5d:ae:e2:33:eb:4e:
d4:d6:ea:08:b4:f0:cf:87:00:1c:75:b9:45:5e:71:
d9:e3:93:87:35:91:14:11:c1:70:79:ee:27:cd:70:
b6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.27.244.0/22
Signature Algorithm: sha256WithRSAEncryption
05:fd:bc:d4:ad:7e:02:7e:9b:87:16:f9:f3:c2:9d:0f:10:ff:
79:04:d0:c8:d8:04:19:ba:df:ae:44:56:28:88:59:93:ee:a7:
92:c3:28:15:1d:5e:21:17:07:c1:28:ad:e5:d7:31:4e:bb:07:
83:d1:94:35:dc:5c:35:f8:eb:8b:ae:0c:61:89:0d:d3:7f:93:
1b:e0:d6:31:c2:d8:29:44:62:91:89:c1:e4:38:ed:5d:ed:fe:
9e:6b:12:36:36:be:43:13:49:f1:b6:6e:c2:2c:23:19:3c:c2:
8c:47:5f:0f:3d:ec:58:ee:f9:c4:f9:40:77:28:78:19:96:a5:
4f:d9:49:81:35:e6:8f:d5:dc:92:93:00:04:f9:50:ca:11:64:
03:2b:a9:5e:07:05:bb:98:64:d2:ed:9e:03:7d:bb:b6:96:b4:
79:4d:ed:55:8b:e5:72:33:49:b0:3a:c3:14:ac:8c:5e:c6:67:
25:f8:05:2a:44:7a:14:33:b1:27:35:2c:e0:ec:8e:3f:50:40:
6a:45:ba:b3:05:f7:91:b5:bc:68:dd:ed:6d:c7:2a:82:47:94:
8a:df:0c:bf:4c:4a:81:76:06:f2:e9:fb:d8:c8:a9:35:7f:91:
13:56:70:39:a5:a2:a1:a8:74:28:ce:e4:c8:fe:55:fe:12:24:
7c:fd:65:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:18:51 2026 by rpki-client