Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer
File: yPWXElLMBM4--LZy7nTid7LM1hU.cer (raw, json)
Hash identifier: zZoOsfLcWaGR92lIYDsPXumnOIBtgZ9SVUz6efFycNQ=
Subject key identifier: C8:F5:97:12:52:CC:04:CE:3E:F8:B6:72:EE:74:E2:77:B2:CC:D6:15
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D9CF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 30 Sep 2026 14:33:52 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 139082
IP: 103.139.108.0/24
IP: 2001:df0:7780::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 05:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186831 (0x2d9cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 30 14:33:52 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91F72E2, serialNumber=C8F5971252CC04CE3EF8B672EE74E277B2CCD615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:58:bf:66:27:a3:f5:39:c0:db:ad:d8:18:
86:20:14:0f:2f:11:e6:d1:b3:37:f9:24:1b:9d:b7:
f5:d2:8b:96:dd:e9:07:a5:dc:46:21:cf:6e:a5:90:
36:3f:ee:ae:56:5b:cf:e1:97:43:bd:ae:6a:e1:6a:
73:eb:73:50:17:da:c6:16:ab:0e:d5:6e:40:e7:2f:
28:ce:cd:15:c1:4a:48:45:e0:c7:f9:36:f5:ed:5c:
61:16:6d:7a:50:8b:d7:17:ae:bf:d7:5a:5f:cc:be:
66:96:14:b8:39:16:4d:ad:03:f6:28:be:7f:41:5e:
e5:7f:14:f9:3f:f4:a5:11:97:48:7b:7c:bd:71:aa:
a0:8a:71:2a:46:e1:b5:a7:9d:a5:36:5e:88:d4:1d:
63:e1:c9:5f:e8:ae:2c:c4:60:9c:7e:24:53:fd:63:
64:79:d2:96:d9:d8:18:ef:f2:24:1d:0d:33:8c:b2:
b7:3c:ba:53:99:9f:13:10:37:8e:e0:af:84:e9:d6:
14:3e:f4:56:2b:97:30:39:8d:d2:b4:f8:9f:01:61:
f7:4c:c8:cc:05:4a:d9:6b:36:02:38:a6:1e:36:ae:
dc:3d:4a:cc:04:76:a3:95:c8:39:1a:2c:50:e2:e8:
1c:da:e8:0c:61:f1:87:ff:d7:d2:f1:51:3a:31:2a:
9f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F5:97:12:52:CC:04:CE:3E:F8:B6:72:EE:74:E2:77:B2:CC:D6:15
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139082
sbgp-ipAddrBlock: critical
IPv4:
103.139.108.0/24
IPv6:
2001:df0:7780::/48
Signature Algorithm: sha256WithRSAEncryption
7e:d8:08:f5:14:c5:5a:75:1c:60:ae:00:b5:2a:6b:24:21:0d:
a1:31:72:a7:88:09:85:8b:0a:54:d6:ce:90:9d:e0:ff:50:c8:
3a:1e:40:e4:73:2f:db:a2:45:76:4e:fb:0a:75:ab:fc:ee:ef:
d2:a3:91:d3:40:cb:83:77:79:e9:32:92:04:9f:21:c4:2d:95:
f2:a1:3a:88:50:8a:ae:59:22:35:3d:df:d9:99:0b:31:8f:b7:
60:12:ef:1b:13:5c:3d:fa:3c:8d:d4:82:c0:3f:f1:0e:6a:68:
77:b9:27:ae:ab:97:04:6e:ef:bc:f1:4c:e2:d3:14:01:15:37:
3d:33:0c:b7:96:e6:a2:ba:e5:90:3c:72:f9:8f:d6:0c:73:c1:
62:f1:6c:37:88:3a:54:c3:86:b8:a5:dc:36:3e:6f:7c:81:b2:
9c:0f:3d:c7:d7:60:4b:60:7c:27:b1:f3:32:e7:fd:ee:49:ce:
28:33:4d:85:c2:26:59:e3:d3:34:c9:a5:96:fb:3b:a5:b2:90:
3e:8c:86:0e:6d:fa:0e:b3:27:3a:bc:90:35:54:e7:b2:76:6c:
94:95:8d:df:fd:c2:9b:14:d8:f1:4f:3a:88:44:83:6a:37:76:
d3:a5:eb:db:96:a8:c2:f8:46:7b:03:38:06:e3:64:6d:05:f2:
2e:ec:93:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 4 11:17:53 2026 by rpki-client