Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGEnBAQ_3E-h6xPOayYRy9evuus.cer
File: lGEnBAQ_3E-h6xPOayYRy9evuus.cer (raw, json)
Hash identifier: 690IgqdUcWeu/gSu8F/DrQWiEwuB8BaVJG4wbjdisUo=
Subject key identifier: 94:61:27:04:04:3F:DC:4F:A1:EB:13:CE:6B:26:11:CB:D7:AF:BA:EB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D8C5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916AF56/D38CC962BAD911F1B87B60C15211F970/lGEnBAQ_3E-h6xPOayYRy9evuus.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916AF56/D38CC962BAD911F1B87B60C15211F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 28 Sep 2026 01:13:38 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 135519
IP: 103.122.120.0/24
IP: 103.221.84.0/23
IP: 2001:df4:b600::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186565 (0x2d8c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 28 01:13:38 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A916AF56, serialNumber=94612704043FDC4FA1EB13CE6B2611CBD7AFBAEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:3c:b7:81:87:a1:bf:1b:c6:b8:73:c2:82:
74:8e:6e:c5:01:2c:21:7c:ea:0b:c6:c3:d2:fe:c2:
79:14:06:9a:ed:f6:23:26:da:f1:16:a5:a1:b9:be:
81:ad:ef:7e:39:28:86:56:98:0e:28:cf:83:8c:c2:
d0:41:91:11:8a:31:b3:b9:d4:5b:cc:1a:e3:b1:96:
7e:5b:67:4e:f0:ec:20:e7:af:ff:0a:78:ec:58:54:
d1:00:ac:8e:1e:fd:58:79:09:6e:12:a0:09:1f:82:
9f:7c:d5:21:ad:c9:6d:cd:a0:8f:cc:85:fb:1e:a0:
fe:38:ed:f5:c5:dd:90:f1:6f:e2:36:ef:48:64:9f:
72:48:a6:58:9e:a5:ee:f6:78:f3:e8:d4:15:d7:7e:
4e:ba:24:90:9e:60:62:db:e8:32:8a:69:0b:a6:09:
98:0c:4b:88:6a:44:8b:0e:ff:ec:50:9c:09:b7:99:
1f:3f:49:a7:67:2b:e6:90:a6:e1:57:47:af:b1:a7:
89:56:a8:95:68:ed:87:ef:95:70:c9:bb:61:f3:58:
a0:ee:7a:39:74:6a:1d:94:4f:b4:91:fe:c6:fd:e2:
5c:54:22:a1:67:ab:b8:ab:37:bc:00:72:1d:98:12:
43:5a:b0:be:04:17:8f:ff:15:62:df:09:c9:97:04:
6a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:61:27:04:04:3F:DC:4F:A1:EB:13:CE:6B:26:11:CB:D7:AF:BA:EB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916AF56/D38CC962BAD911F1B87B60C15211F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916AF56/D38CC962BAD911F1B87B60C15211F970/lGEnBAQ_3E-h6xPOayYRy9evuus.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135519
sbgp-ipAddrBlock: critical
IPv4:
103.122.120.0/24
103.221.84.0/23
IPv6:
2001:df4:b600::/48
Signature Algorithm: sha256WithRSAEncryption
28:ce:5c:ca:7c:06:ff:4b:9c:40:47:f2:4a:57:07:5a:14:29:
8b:5e:a7:c0:3d:59:af:19:0c:6c:b9:ac:33:e7:6a:af:4e:29:
32:62:27:58:fc:f6:d0:b4:bd:35:c4:57:4a:1e:a9:e4:e8:09:
23:9d:a7:cb:26:a1:f9:02:21:9b:8a:9c:da:5a:90:7e:69:d8:
b1:31:0e:e6:3b:80:cb:e1:27:f1:4b:4f:80:eb:5a:15:61:0d:
82:89:94:c6:6c:af:db:1a:a4:f6:4d:45:8f:b9:5b:fd:56:a1:
a0:8c:fd:08:4e:49:6b:4c:06:bc:f5:0a:45:64:a7:31:52:f1:
71:0d:29:93:72:70:30:f2:81:ca:0c:b0:9f:c1:cb:4a:5a:af:
a0:33:25:a0:f7:7d:61:5e:9c:25:5a:52:6a:27:bc:55:1e:68:
6e:9d:64:ea:ad:25:6c:76:9b:26:c6:ae:29:1a:32:2c:8f:85:
3b:76:dd:21:f3:18:55:d7:91:7c:b6:22:86:7b:ad:b4:09:af:
72:de:9e:98:f9:ff:8c:6c:c0:e0:52:e2:aa:e7:56:2f:07:0d:
49:cf:88:82:45:b4:f2:38:cd:8f:64:04:a8:3a:64:4c:1e:d9:
a9:16:f3:a1:5e:c7:dd:cd:b1:9c:e9:8b:65:0a:8c:52:43:1a:
00:fa:f7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:10:28 2026 by rpki-client