Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7pcaYHZl-kImp3nvIorcpwiE2g.cer
File: E7pcaYHZl-kImp3nvIorcpwiE2g.cer (raw, json)
Hash identifier: MiJ9CY6FBiki0lAHmxQFEuZrgUIlnYANBHz0TKB5XoI=
Subject key identifier: 13:BA:5C:69:81:D9:97:E9:08:9A:9D:E7:BC:8A:2B:72:9C:22:13:68
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A324
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 09 Mar 2026 00:37:07 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 140959
IP: 103.153.203.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172836 (0x2a324)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 9 00:37:07 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91AE7C5, serialNumber=13BA5C6981D997E9089A9DE7BC8A2B729C221368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:27:62:62:5e:75:26:27:9c:fb:78:c6:92:ff:
c4:8b:f5:7b:fe:4b:96:b4:3b:6a:25:fa:3d:5a:61:
c5:eb:60:dd:c5:c0:7b:b9:98:43:dc:bd:a8:3f:b9:
3c:73:b7:45:31:82:31:da:4e:ca:a1:7c:25:49:2d:
f3:f6:83:23:ec:5b:26:b1:df:9a:e3:18:8d:26:21:
4e:0a:89:58:d2:33:9d:9c:ed:98:67:09:21:5d:34:
ba:da:d3:0c:22:16:40:b8:c2:c6:d1:87:a9:0d:fc:
9e:c1:2d:64:8b:8a:8b:d3:bd:51:a6:c1:60:e5:6e:
38:22:bc:84:be:19:54:8b:f5:51:af:fa:5d:c5:65:
27:a3:b2:47:10:92:43:3e:33:e4:11:b6:1e:ae:a3:
ac:40:cd:9a:dd:f3:db:b6:59:56:fc:96:62:09:47:
8f:de:22:e4:7e:12:5a:4d:e9:5a:32:14:70:fa:4c:
7d:51:a7:68:2e:e3:19:06:6d:33:51:e1:49:71:5c:
55:7b:fc:d4:fc:80:20:bd:9b:00:0b:69:83:96:76:
67:81:9c:67:e6:52:c9:22:b1:50:6b:90:d7:26:d9:
83:0a:e0:ec:2c:ed:95:03:3f:04:9f:13:ff:00:99:
e6:af:af:3c:e2:c9:46:67:4a:93:a7:3b:74:a7:77:
c6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BA:5C:69:81:D9:97:E9:08:9A:9D:E7:BC:8A:2B:72:9C:22:13:68
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140959
sbgp-ipAddrBlock: critical
IPv4:
103.153.203.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a4:84:ab:12:2f:10:d2:07:09:30:2a:3c:a5:db:60:83:1c:
b7:5e:dc:bc:89:0a:58:30:03:6d:ae:11:ba:2a:ea:42:d9:e9:
4c:00:90:75:f2:00:31:20:43:44:54:71:07:f0:3b:9d:f5:30:
20:e1:ea:03:76:30:c6:16:9a:b0:4c:5d:b8:cb:23:da:9f:a9:
87:a5:e3:ae:9f:10:64:f4:15:60:24:6d:0a:06:9c:4d:77:94:
c6:08:eb:41:90:19:e3:c3:a5:8d:ef:d2:40:fa:d9:d2:59:a0:
7e:8e:9e:a1:cf:5f:93:7f:5a:13:0f:fb:8f:a1:44:17:8d:13:
98:f5:ba:9f:d7:a6:a9:13:ea:1b:86:1a:51:ec:3d:0e:c4:f7:
3c:87:6f:2c:ea:d9:96:1f:8e:e5:50:b8:d1:fd:ff:c7:08:b0:
a6:07:d2:3b:10:25:1e:6c:69:15:ca:67:d1:cd:f2:15:44:84:
92:07:3e:2e:8c:55:4f:57:7a:af:d5:5c:86:86:e1:ba:20:5c:
b8:94:bd:65:82:59:f5:a5:13:fd:38:00:b1:0e:40:7f:10:ad:
08:6f:bf:7e:c9:dd:96:4d:1e:57:79:b5:b2:60:25:b6:9a:f9:
f2:f5:17:cd:56:ad:00:3d:04:62:7b:97:f5:68:58:cd:8a:bf:
f3:6c:e8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:34 2026 by rpki-client