
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
File: xGfLLMucIacHtd-86roFTBkFI64.cer (raw, json)
Hash identifier: vktjm7FjWiUPeYgO3fqS01dIXqFj3PHnOrMH3UAIA2U=
Subject key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 028F75
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 15 Feb 2026 13:38:43 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 134970
IP: 103.251.244.0/22
IP: 220.247.128.0/22
IP: 2407:7380::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 13:09:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167797 (0x28f75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 15 13:38:43 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:09:f1:d0:0a:72:14:5d:70:cc:54:70:12:7d:
41:61:43:b3:99:4b:b8:20:32:3a:ae:e9:36:f2:50:
8e:ae:06:92:3f:ff:96:d7:06:71:33:3d:fe:2f:c9:
36:fb:05:ba:5f:81:7c:8f:f4:1f:ea:59:9c:6c:ab:
a5:e2:94:31:62:f7:d2:7e:25:05:fe:33:7c:bb:35:
43:04:d5:4f:e2:9e:4f:ca:49:10:a0:64:6f:1f:85:
fb:b9:d7:ee:58:be:f9:3b:27:9d:7b:31:10:c3:03:
eb:e7:7d:c6:b1:37:a1:9d:06:e7:ff:1c:0f:26:ac:
aa:0e:b8:ca:3b:2f:fa:5c:e9:0a:d3:f7:de:d4:15:
da:b8:f0:a8:a7:fa:5f:f1:34:b3:b4:de:bd:75:ee:
c9:41:2a:b5:6b:3c:bb:32:68:ec:a5:24:dd:8a:85:
be:d0:3a:f9:d4:f0:b2:80:9b:bd:30:3b:de:ee:6a:
bd:91:9e:6b:7a:4a:bb:43:5a:61:98:aa:d8:e0:ad:
55:28:cf:58:23:09:c1:fc:cc:7b:9c:57:7c:8e:1a:
f1:8f:27:e6:6f:68:d0:bb:6a:a2:34:93:1d:cb:3e:
95:c4:dc:78:7f:4b:fe:86:b7:d4:e7:41:f5:b0:a5:
e8:71:29:3c:7e:79:e2:dc:9f:35:66:fc:c5:bf:ae:
8a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134970
sbgp-ipAddrBlock: critical
IPv4:
103.251.244.0/22
220.247.128.0/22
IPv6:
2407:7380::/32
Signature Algorithm: sha256WithRSAEncryption
15:6d:e2:3a:68:a5:6e:35:18:90:4c:74:f7:3f:ed:b9:9d:33:
7d:d5:0d:53:38:61:c7:f3:c3:c6:36:d6:10:ae:aa:a1:24:53:
60:6e:09:81:bb:58:1d:58:12:01:db:46:5c:5f:af:91:38:bd:
90:9b:30:fb:a8:c7:3f:f0:78:de:54:31:5c:0e:5b:fd:ea:dc:
c1:e8:0c:7d:b9:8b:d4:d1:86:89:56:65:b6:c3:2e:c9:55:18:
94:13:7e:27:6f:8b:fd:18:60:0d:24:82:63:7b:ae:05:a8:6c:
24:b0:20:09:e7:34:92:47:4b:94:b5:54:cc:84:d7:0d:3a:de:
6a:e3:59:90:e7:ef:63:fe:65:c1:78:c5:39:e7:24:d5:9f:07:
c9:74:72:3c:85:45:57:5e:8a:ec:d3:bc:98:59:fd:c9:36:83:
50:45:19:34:2b:90:11:7d:12:c5:8b:b5:74:66:f5:5e:40:17:
dc:37:28:c6:b6:ce:d3:f3:d7:18:31:bb:2d:c0:46:62:e4:67:
f0:bf:30:ac:a3:76:a7:d0:a0:ac:d6:a8:84:ba:10:d8:10:ee:
a5:c9:0c:a5:a7:93:28:69:ec:ba:4a:f7:88:a8:1f:c2:6f:31:
61:27:a7:40:f1:7c:ad:c1:26:fb:2d:dd:ee:0e:c2:3a:68:01:
de:75:e2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:04:55 2026 by rpki-client