
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7pcaYHZl-kImp3nvIorcpwiE2g.cer
File: E7pcaYHZl-kImp3nvIorcpwiE2g.cer (raw, json)
Hash identifier: 3/em88f2ouJYil0Xh5MdthEfqxgeBOWLJFI5L27cMfY=
Subject key identifier: 13:BA:5C:69:81:D9:97:E9:08:9A:9D:E7:BC:8A:2B:72:9C:22:13:68
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C6A3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Jul 2026 14:35:06 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 140959
IP: 103.153.203.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181923 (0x2c6a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 22 14:35:06 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A91AE7C5, serialNumber=13BA5C6981D997E9089A9DE7BC8A2B729C221368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:27:62:62:5e:75:26:27:9c:fb:78:c6:92:ff:
c4:8b:f5:7b:fe:4b:96:b4:3b:6a:25:fa:3d:5a:61:
c5:eb:60:dd:c5:c0:7b:b9:98:43:dc:bd:a8:3f:b9:
3c:73:b7:45:31:82:31:da:4e:ca:a1:7c:25:49:2d:
f3:f6:83:23:ec:5b:26:b1:df:9a:e3:18:8d:26:21:
4e:0a:89:58:d2:33:9d:9c:ed:98:67:09:21:5d:34:
ba:da:d3:0c:22:16:40:b8:c2:c6:d1:87:a9:0d:fc:
9e:c1:2d:64:8b:8a:8b:d3:bd:51:a6:c1:60:e5:6e:
38:22:bc:84:be:19:54:8b:f5:51:af:fa:5d:c5:65:
27:a3:b2:47:10:92:43:3e:33:e4:11:b6:1e:ae:a3:
ac:40:cd:9a:dd:f3:db:b6:59:56:fc:96:62:09:47:
8f:de:22:e4:7e:12:5a:4d:e9:5a:32:14:70:fa:4c:
7d:51:a7:68:2e:e3:19:06:6d:33:51:e1:49:71:5c:
55:7b:fc:d4:fc:80:20:bd:9b:00:0b:69:83:96:76:
67:81:9c:67:e6:52:c9:22:b1:50:6b:90:d7:26:d9:
83:0a:e0:ec:2c:ed:95:03:3f:04:9f:13:ff:00:99:
e6:af:af:3c:e2:c9:46:67:4a:93:a7:3b:74:a7:77:
c6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BA:5C:69:81:D9:97:E9:08:9A:9D:E7:BC:8A:2B:72:9C:22:13:68
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140959
sbgp-ipAddrBlock: critical
IPv4:
103.153.203.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:5f:b3:6f:1b:9f:e1:25:bc:b1:38:ea:45:a5:11:df:52:17:
82:7d:1c:4c:7a:e3:75:71:e8:c1:80:61:b0:ca:d6:2c:c0:d9:
ad:ee:bf:92:3f:64:f9:e5:80:fc:b5:7e:7f:7c:70:19:99:c2:
76:f6:be:22:2e:66:77:c6:bc:5b:56:6a:0c:73:97:31:10:0b:
c5:f9:db:92:71:3c:2d:0f:33:d8:d5:6f:ce:38:65:57:14:ab:
7d:1a:b1:fd:0a:9e:a7:1c:09:ef:01:de:64:91:47:29:7f:87:
d0:e0:24:1d:2f:6d:4e:0c:47:8f:b9:bd:4d:3f:65:88:7b:ea:
49:0a:7b:a8:1c:14:fd:6c:35:6a:2c:40:fd:ec:44:8c:97:f4:
df:a5:6d:bc:a1:c7:17:a3:b9:c1:8c:fe:ac:5b:bc:d9:fa:37:
e8:d9:27:3b:29:ab:25:64:53:fb:7b:9f:2e:95:8e:a1:f1:c0:
7c:3a:a3:e1:ec:c2:85:3a:c0:2f:09:82:c0:7d:27:f1:35:b8:
32:96:dd:97:38:e8:21:88:2b:58:23:e5:ee:81:76:5c:97:c5:
2e:7f:93:8d:b1:2e:88:8a:2c:a0:4f:1c:41:14:f8:e1:66:13:
d6:af:05:88:a9:cd:a6:d1:a7:7d:c7:5a:28:6c:57:55:a4:b8:
68:3e:a7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:41:57 2026 by rpki-client