Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y70GgkBePlkg8UsDghSUjF410cM.cer
File: y70GgkBePlkg8UsDghSUjF410cM.cer (raw, json)
Hash identifier: BdzwKpyFhjIoW6MTRkUBvcT1BwO4YkwDT0PSSQSgSb0=
Subject key identifier: CB:BD:06:82:40:5E:3E:59:20:F1:4B:03:82:14:94:8C:5E:35:D1:C3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02ADBC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Apr 2026 02:43:41 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 149312
IP: 103.178.188.0/23
IP: 2400:48a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175548 (0x2adbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 21 02:43:41 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A916D4BE, serialNumber=CBBD0682405E3E5920F14B038214948C5E35D1C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:fa:41:8f:dc:0a:a0:5d:b5:05:4e:27:92:
55:5f:ad:b2:50:c8:8d:6f:9c:3c:3d:cd:0d:4a:07:
fa:a4:65:20:6e:e2:60:d1:7a:44:d0:d9:53:f8:88:
be:63:b1:45:97:a8:80:ab:9b:a5:44:cb:a1:71:72:
1b:1f:9c:cd:36:58:da:51:3d:65:29:bd:8c:a5:e7:
fa:19:3f:60:3e:ca:42:11:75:7f:40:af:35:06:62:
9e:de:28:fa:3a:7b:b6:9d:6a:5f:67:e9:50:4b:93:
d5:5e:f9:16:f6:5b:fd:7c:9e:c7:4b:ba:55:b9:24:
bb:45:e6:e4:e6:3c:1a:93:02:67:0d:eb:e6:21:04:
ab:1d:f7:61:8c:cc:d1:06:cc:58:15:08:e1:ce:4c:
e2:83:d0:b8:f7:5d:a7:8f:12:2e:99:f5:5e:cf:3f:
76:58:8c:b2:d8:d5:ff:49:73:c0:24:60:9b:c1:3a:
e2:8b:e4:05:0c:cf:74:4f:f2:38:b5:25:65:63:2a:
b3:ee:b2:c2:11:8a:c2:a6:67:ce:59:96:5c:6a:94:
b3:40:84:f6:a1:75:2c:62:08:21:ca:b7:d6:65:17:
7c:3b:62:4e:3e:3d:88:8d:59:cb:b6:c7:4f:0f:48:
54:4b:e2:2f:03:97:a5:6f:4a:be:cf:ce:c8:36:29:
57:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BD:06:82:40:5E:3E:59:20:F1:4B:03:82:14:94:8C:5E:35:D1:C3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149312
sbgp-ipAddrBlock: critical
IPv4:
103.178.188.0/23
IPv6:
2400:48a0::/32
Signature Algorithm: sha256WithRSAEncryption
70:76:91:da:ab:22:df:02:b2:a7:68:ed:af:37:a8:5a:75:63:
55:08:d6:4d:4f:8a:df:cf:ac:00:22:a9:08:48:3f:09:07:4a:
e1:7b:fa:d4:91:01:a1:62:c2:48:c1:88:81:b4:75:c6:ed:00:
37:c9:b1:fa:c1:f7:88:5d:f8:aa:ea:72:20:49:2a:8d:d9:ad:
a3:8d:ce:12:cd:ab:78:77:f6:b1:f6:05:3c:44:3a:cb:59:98:
5e:50:2c:02:e4:7c:dd:25:10:92:66:a6:b9:87:f5:04:a7:8a:
3e:c3:50:6b:e6:97:24:ae:2a:60:dd:f1:0a:95:2c:ac:a9:2a:
14:d3:71:dc:c6:f1:06:30:68:6c:fe:7b:c7:97:b0:f0:4e:b5:
e6:aa:5a:bb:25:3c:c2:a8:6a:2a:95:f5:f5:8d:2f:0c:a0:64:
50:e3:82:07:23:dc:05:ed:bb:29:a9:86:e7:e1:c1:7a:14:bf:
e5:96:36:d9:44:04:a6:4a:86:0c:72:6d:e7:c5:e5:8a:8c:d2:
65:cd:70:63:00:a7:64:d1:1a:e0:2c:6a:c0:33:4f:7b:2e:41:
28:2d:af:c0:bd:04:bd:d9:4f:9e:46:f9:6b:2e:c4:e4:23:ee:
73:48:42:e0:7b:a8:23:87:9d:9a:f5:33:53:6f:4a:f7:5a:8f:
d9:6b:22:83
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAq28MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDQyMTAyNDM0MVoXDTI3MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNkQ0QkUxMTAvBgNVBAUTKENCQkQwNjgyNDA1RTNFNTkyMEYxNEIw
MzgyMTQ5NDhDNUUzNUQxQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+lvpBj9wKoF21BU4nklVfrbJQyI1vnDw9zQ1KB/qkZSBu4mDRekTQ2VP4iL5j
sUWXqICrm6VEy6FxchsfnM02WNpRPWUpvYyl5/oZP2A+ykIRdX9ArzUGYp7eKPo6
e7adal9n6VBLk9Ve+Rb2W/18nsdLulW5JLtF5uTmPBqTAmcN6+YhBKsd92GMzNEG
zFgVCOHOTOKD0Lj3XaePEi6Z9V7PP3ZYjLLY1f9Jc8AkYJvBOuKL5AUMz3RP8ji1
JWVjKrPussIRisKmZ85ZllxqlLNAhPahdSxiCCHKt9ZlF3w7Yk4+PYiNWcu2x08P
SFRL4i8Dl6VvSr7Pzsg2KVcrAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUy70GgkBe
Plkg8UsDghSUjF410cMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZENEJFLzZBOEY3MTM2NkQ0RTExRUM5Q0I4Q0UwQUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2RDRCRS82QThGNzEzNjZENEUxMUVDOUNCOENFMEFDNEY5QUUwMi95NzBHZ2tC
ZVBsa2c4VXNEZ2hTVWpGNDEwY00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAkdAMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ7K8MA0EAgAC
MAcDBQAkAEigMA0GCSqGSIb3DQEBCwUAA4IBAQBwdpHaqyLfArKnaO2vN6hadWNV
CNZNT4rfz6wAIqkISD8JB0rhe/rUkQGhYsJIwYiBtHXG7QA3ybH6wfeIXfiq6nIg
SSqN2a2jjc4Szat4d/ax9gU8RDrLWZheUCwC5HzdJRCSZqa5h/UEp4o+w1Br5pck
ripg3fEKlSysqSoU03HcxvEGMGhs/nvHl7DwTrXmqlq7JTzCqGoqlfX1jS8MoGRQ
44IHI9wF7bspqYbn4cF6FL/lljbZRASmSoYMcm3nxeWKjNJlzXBjAKdk0RrgLGrA
M097LkEoLa/AvQS92U+eRvlrLsTkI+5zSELge6gjh52a9TNTb0r3Wo/ZayKD
-----END CERTIFICATE-----
Generated at Thu May 21 08:40:39 2026 by rpki-client