Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.cer
File: tYw5FD_NINBzXQ5fxuyMeS2sy9Y.cer (raw, json)
Hash identifier: z9wUYqT6O3LItt6Kvh3ieOpYGdVcfp6JdKdprCLZKWE=
Subject key identifier: B5:8C:39:14:3F:CD:20:D0:73:5D:0E:5F:C6:EC:8C:79:2D:AC:CB:D6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CE5A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912FAFC/DE3291A49B8411F1B93DFD584411F970/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912FAFC/DE3291A49B8411F1B93DFD584411F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 19 Aug 2026 04:17:23 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 142225
IP: 203.2.216.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183898 (0x2ce5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 19 04:17:23 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A912FAFC, serialNumber=B58C39143FCD20D0735D0E5FC6EC8C792DACCBD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:4b:00:ca:e8:d9:7a:87:c1:ea:51:16:27:
4a:6b:5f:1e:0c:b1:41:40:73:63:fa:16:bd:ae:77:
24:1b:9f:37:18:e1:c8:ee:a1:4b:ac:89:b3:ee:4f:
4b:1d:b6:33:ad:f4:a5:98:3d:05:69:7c:78:da:68:
2f:f9:12:32:8a:a2:37:ef:49:c4:1c:0a:7e:fe:cd:
59:d9:c8:3b:a1:ce:76:13:ef:ca:23:ca:ad:94:ec:
32:e9:06:78:07:c5:b9:cd:11:a6:73:56:73:cc:07:
7e:c7:86:05:cf:14:11:5f:fa:8d:56:a8:57:85:6e:
53:fd:8d:f8:1b:ff:51:70:5b:67:db:f6:7b:c6:4d:
9f:ec:a3:03:78:f8:a7:01:f7:ab:1e:44:78:a7:7e:
1b:29:8c:0f:12:8b:3b:bb:58:e8:93:90:c0:11:8b:
00:44:63:71:57:9a:74:d3:1b:de:64:ee:73:4f:6c:
d8:9c:28:33:60:c3:34:34:e6:ce:55:2a:08:d1:92:
b5:d9:aa:c3:23:f4:14:bb:23:e1:19:bf:66:37:7c:
6c:ce:58:45:ac:92:9f:71:16:ff:6f:51:66:97:1d:
c2:6b:64:a5:d2:94:6f:63:31:63:8d:f7:e0:7c:59:
0b:e4:ba:77:ed:7e:ca:5d:63:31:c4:05:f6:25:6a:
4b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8C:39:14:3F:CD:20:D0:73:5D:0E:5F:C6:EC:8C:79:2D:AC:CB:D6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912FAFC/DE3291A49B8411F1B93DFD584411F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912FAFC/DE3291A49B8411F1B93DFD584411F970/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142225
sbgp-ipAddrBlock: critical
IPv4:
203.2.216.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:71:72:94:93:60:37:b9:93:15:37:74:a8:82:e8:c6:c3:4a:
db:a2:f2:ae:31:4b:1b:b2:92:ac:75:68:b5:90:97:0d:b1:8a:
5c:ff:0b:90:b5:56:91:52:66:02:37:2a:e2:a3:ad:64:1d:ec:
0e:52:06:2f:6b:48:49:f3:ff:c8:b1:e3:ff:d7:fc:78:c9:58:
13:55:7d:8a:52:ee:5b:c1:2e:06:f6:c7:db:48:5b:db:b3:ac:
e7:0e:a9:c6:d7:5f:80:e2:f0:48:57:da:46:b4:72:e1:66:13:
b7:a9:c1:36:42:3a:94:01:34:b2:c1:f2:b2:f7:37:75:b2:fa:
47:22:f9:e4:61:91:ac:2c:79:9c:ea:68:71:13:4f:66:c2:15:
51:74:7e:24:84:d1:3d:01:3f:60:36:20:b6:8c:6b:2b:b5:26:
4f:71:e5:42:4e:ca:0b:93:43:34:4a:4d:cf:5d:0b:92:2b:0a:
a5:d6:f1:ee:d6:e2:10:70:9a:ed:c7:b6:61:7a:d1:2d:e7:44:
8e:41:28:75:b4:6c:fa:db:95:02:d2:4f:ad:f8:96:0b:09:c8:
fb:dc:43:48:66:2d:3a:2b:ab:8a:b9:5a:34:91:89:5c:fc:e5:
3f:e3:d7:2a:e4:a0:88:5f:2f:71:c4:1d:9e:8e:99:ec:9a:1f:
d2:2c:a2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 10:45:06 2026 by rpki-client