Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer
File: lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer (raw, json)
Hash identifier: hE118ZDeUUXpzvgi9MR8mhsht2l2s/y1T+Fff71CsOE=
Subject key identifier: 96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B0F1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Apr 2026 22:07:15 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 142006
IP: 103.164.86.0/23
IP: 2001:df6:4280::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176369 (0x2b0f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 30 22:07:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91211D4, serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:a5:83:f8:c0:f1:36:93:19:61:e9:0f:7e:
b2:4c:ce:e9:43:47:c7:53:36:b0:8d:7d:c8:64:df:
9d:f7:b4:fe:95:17:54:7f:54:1d:3d:9a:26:f1:c7:
27:63:c5:f5:ef:c0:ee:66:23:44:a5:9f:93:f0:5e:
62:b9:47:12:b7:72:3d:39:ef:1a:a1:d4:c2:ba:3a:
71:90:f1:7f:34:b3:bb:b8:39:13:1c:41:a2:ae:d7:
e8:b6:dd:d5:24:af:77:f7:1c:58:82:e8:86:d5:a6:
ab:2f:1f:b7:14:d2:52:2e:ce:d7:3f:f0:18:1f:bf:
a6:3d:e0:7b:6e:b8:f1:44:c6:b6:d8:1f:c4:b8:44:
2a:15:e8:a6:73:d0:f2:4a:df:47:d1:58:9c:4f:67:
73:97:23:e3:9d:bc:bf:e9:3d:d8:6d:bf:c5:31:e1:
1a:b7:02:2b:b9:a6:ed:b5:87:b0:ab:dd:61:0a:7f:
83:79:73:73:9f:fc:f9:e9:a8:14:d7:83:70:3c:d8:
ab:d7:f6:52:12:d8:8b:a2:33:c8:44:a2:be:dd:c5:
fa:f1:a6:32:76:e6:75:04:ac:38:f9:61:35:b9:ca:
fa:3d:75:1e:8c:07:52:d2:e1:27:6a:75:d8:5b:2b:
3c:a4:0e:d3:5b:da:6c:09:46:76:33:60:c3:f9:e2:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142006
sbgp-ipAddrBlock: critical
IPv4:
103.164.86.0/23
IPv6:
2001:df6:4280::/48
Signature Algorithm: sha256WithRSAEncryption
11:82:5a:4b:44:9f:ad:8b:b5:8f:74:f2:39:36:f4:75:a7:f0:
9d:7c:cd:6c:d9:4e:10:e2:65:cd:ce:8c:93:33:4e:3f:ad:c9:
3c:68:a1:05:bb:49:42:d2:e9:54:98:b0:9e:b8:88:9d:04:52:
80:c7:78:2b:c9:29:b0:c9:b0:ca:fb:2a:b8:a5:1f:36:27:08:
7e:95:f8:15:ff:a6:1a:50:c0:22:b2:0e:95:96:a1:1e:d3:e6:
61:f9:b9:4e:9c:43:ef:12:bd:fc:c1:42:b6:79:37:dd:7d:ed:
5f:13:0a:68:50:78:a7:c4:8c:7c:7f:24:7f:6e:ea:c3:d0:dd:
e2:8a:30:5e:40:ca:dd:66:14:c7:e0:8c:33:61:9b:e4:f1:1d:
03:5a:5a:0d:e8:df:92:50:27:aa:92:bf:63:1b:2e:04:66:ab:
9d:c1:cb:4f:54:7d:9e:30:9e:90:50:21:cc:a7:df:9a:e3:08:
e4:a6:c4:a2:d4:9c:42:98:7c:27:5d:16:fa:46:76:ac:1c:7b:
e1:3a:f7:cc:5a:c5:25:4f:d7:b6:7a:34:47:48:eb:87:5b:88:
9a:71:6a:7f:a4:3f:d2:b8:29:ac:24:12:b4:c2:96:df:64:9d:
21:70:d5:f9:d5:17:be:ad:d2:91:07:08:01:7e:f4:68:39:cc:
a0:29:d8:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 21 08:43:08 2026 by rpki-client