Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
File: nAOc5JtXef24TeO2mPZ26EQjZnk.cer (raw, json)
Hash identifier: x+ma5xm2qdtg9gEwMSrXluKAYsBRZmE3Ei1lrH1MXFQ=
Subject key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D859
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 25 Sep 2026 02:55:17 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 63989
IP: 103.58.148.0/22
IP: 103.82.248.0/22
IP: 202.9.89.0 -- 202.9.90.255
IP: 202.94.166.0/24
IP: 2402:6880::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 10:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186457 (0x2d859)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 25 02:55:17 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e9:d3:0f:14:8f:2d:bf:39:27:c4:57:d9:c4:
d7:3b:05:04:f9:ba:99:63:88:2e:7d:aa:b6:63:21:
ca:1a:25:85:14:0a:10:d8:c4:dd:16:2d:ad:07:35:
6e:04:75:82:5e:c0:c9:d0:2c:ea:7c:8e:a8:68:20:
7a:2a:14:49:ef:05:0b:6c:f4:07:1e:10:15:d2:5d:
ca:da:c0:d7:5c:77:44:97:7d:c8:7f:5b:3b:5d:0a:
9b:70:f0:00:42:0b:40:42:a1:b0:6b:f3:26:22:ae:
90:f8:56:57:74:73:37:b3:de:62:62:2c:71:d8:53:
b2:ca:3e:5d:bf:7d:bb:20:03:66:2e:8e:d2:a8:a5:
c8:fe:3d:85:53:b4:ff:86:7a:48:34:1b:25:d9:55:
af:cc:ba:5c:16:ef:9a:8f:9e:b8:ee:81:4f:d8:25:
2a:26:8f:9c:2a:4d:4c:63:ac:c3:1e:d0:26:86:ac:
df:64:73:7f:5f:e4:04:52:f6:19:56:88:06:cb:fc:
2e:bb:cd:d6:10:c6:7c:2c:20:2b:9f:95:aa:42:1f:
55:ab:0e:7a:f9:4d:18:d4:cb:2c:bc:36:b8:a9:05:
0a:95:8a:c1:92:8a:d0:97:89:89:2a:0a:82:42:d0:
77:8a:57:aa:14:fc:4e:7d:bf:ec:08:2d:b2:e5:5b:
62:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63989
sbgp-ipAddrBlock: critical
IPv4:
103.58.148.0/22
103.82.248.0/22
202.9.89.0-202.9.90.255
202.94.166.0/24
IPv6:
2402:6880::/32
Signature Algorithm: sha256WithRSAEncryption
63:b3:0e:33:13:36:d9:6f:4b:5c:f4:51:f7:c7:3d:fb:f8:70:
4e:d1:63:84:c6:ea:3e:15:f7:96:2b:56:3c:b1:8c:cf:ce:09:
c4:f3:61:d6:e0:36:45:2c:c6:00:84:0d:fa:63:ca:2b:e2:5d:
36:97:1b:1c:13:14:52:e0:b1:ea:b0:32:69:5e:ad:45:5e:c1:
2d:de:de:ff:bd:e6:34:54:ba:f2:8b:bd:b1:4d:9b:86:00:12:
92:7a:d8:7f:4c:65:3c:5a:cf:de:4b:89:ab:62:e3:88:f9:e1:
32:a7:f4:2e:d7:26:d1:97:b8:e8:68:4e:c0:94:78:ae:1e:75:
4f:b0:4d:f9:0b:45:d0:31:51:01:21:96:fa:42:bd:26:e5:c3:
b9:09:fb:de:c4:2e:cc:82:d6:f7:37:71:79:da:5b:0b:82:13:
f5:ae:32:70:ed:39:1b:6b:4d:af:ca:2d:b9:f9:cf:ab:b3:cc:
c3:bb:53:fa:8a:c1:2b:85:ca:85:00:50:d2:90:0c:ab:ec:dd:
91:3f:c1:a3:b5:32:bf:a1:be:6c:3a:19:c6:14:95:ba:56:cb:
89:20:68:7d:e3:a3:e0:2a:c1:90:f6:88:d3:53:3e:7c:cd:c4:
e6:c1:7f:ea:e6:8a:25:9e:95:16:e7:de:7d:b1:6d:14:dd:86:
67:73:7f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:41:37 2026 by rpki-client