Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer
File: nzVmCVwLDAIx0LuWkl4DidHCbFc.cer (raw, json)
Hash identifier: hyBaUi24w3bA/Ezr1dBnsZDBew4LpLF8lzJnLRoZGWI=
Subject key identifier: 9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 028CAF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Feb 2026 12:22:46 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 136511
IP: 103.178.39.0/24
IP: 2001:df0:33c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 12:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167087 (0x28caf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 3 12:22:46 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A911403B, serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:7e:e0:24:b9:1b:9a:b6:dc:2a:51:d1:29:
53:5d:66:29:3b:dd:2c:3f:03:cd:a5:21:5a:e3:98:
ab:06:f1:eb:52:0c:ae:42:73:d8:59:15:43:22:a4:
60:23:6c:b4:5c:1b:a6:6c:ef:dd:23:d7:f1:25:32:
7a:dc:43:9a:82:8e:79:57:b3:23:c3:72:27:d6:3d:
5c:d6:90:09:6c:72:3b:0b:ef:2d:94:f4:ba:45:68:
00:f4:a4:09:cf:e0:a4:eb:90:7e:2e:79:aa:ab:18:
66:f0:f2:7b:42:c2:d8:ab:9e:68:ca:b4:3f:1c:0b:
15:70:20:71:42:08:2e:8f:bf:23:59:7d:1e:0c:80:
64:0b:94:7c:2e:a8:38:91:bd:ad:c7:be:4a:b3:5a:
2f:25:3b:a1:0d:3a:82:f2:9d:46:73:24:b6:8d:98:
75:7d:22:55:5a:66:6e:4d:e0:8a:81:d2:7f:7d:56:
48:af:69:2a:4e:8d:13:1a:67:7d:27:b3:3f:9e:f4:
48:71:13:32:ce:0b:53:ef:b7:0b:76:15:00:46:e5:
45:ba:2d:05:da:0c:b7:9c:3d:f7:f4:6e:32:2e:37:
ee:d8:68:42:c8:98:c8:7d:22:a1:c7:4a:25:38:71:
f8:88:f7:34:5e:f4:86:1e:a3:b7:26:80:dd:df:80:
e7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136511
sbgp-ipAddrBlock: critical
IPv4:
103.178.39.0/24
IPv6:
2001:df0:33c0::/48
Signature Algorithm: sha256WithRSAEncryption
60:2c:0e:38:3b:8a:63:8a:6e:f4:6a:18:b0:1a:d3:d6:d5:95:
c9:43:28:19:a4:58:91:d4:c2:7f:40:47:8a:93:8e:0b:5b:34:
3c:9b:ae:25:ef:07:aa:65:7b:d2:9d:47:72:eb:38:03:6d:a2:
ab:b7:b5:3b:98:cd:12:c8:7c:61:1e:d6:a1:10:ce:de:ed:45:
fa:ae:d3:69:eb:49:e5:cc:e2:18:b3:88:1e:5c:70:ac:d2:79:
bf:75:e5:53:55:4f:75:cc:b4:9d:d1:82:8a:e7:22:c0:f0:62:
29:b5:dc:b6:50:d1:5b:6b:83:69:98:e7:f6:87:81:5c:cd:34:
61:2f:20:e1:c7:93:9c:49:15:09:80:57:ac:47:c7:cb:0b:25:
1f:50:15:ae:1f:f4:f6:fa:6d:57:bd:34:f5:a5:a3:c7:d2:15:
b8:e7:ce:74:20:f6:b8:17:96:df:e1:a4:cc:8c:a6:75:45:19:
d6:f7:45:18:e3:ca:23:7c:72:67:d3:48:0e:90:21:03:cf:ec:
9e:4d:96:72:e1:8f:89:d0:82:36:3d:e2:66:d8:49:d5:f0:53:
c4:61:a0:e4:ec:20:f9:2c:ff:5c:a0:7a:60:b6:33:c7:a0:5f:
e4:e7:f7:76:dc:65:8e:81:69:c0:4b:31:4e:70:82:4a:38:ad:
12:46:1e:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:05:44 2026 by rpki-client