Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
File: H5ogKJzpMW5ls9tyToxzYGyPhks.cer (raw, json)
Hash identifier: l3y3Mhy0A0YWxp2HbKwm7X4Hjxdd0/dFw1gZkD7WREo=
Subject key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AE75
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 23 Apr 2026 13:00:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 137526
IP: 103.111.224.0/22
IP: 2402:a1c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175733 (0x2ae75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 23 13:00:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A914BF33, serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:95:c3:9e:df:7f:d5:2d:48:92:f1:27:63:ee:
7e:5b:3c:3f:bf:3c:da:39:9f:15:20:80:2d:d2:06:
1f:a5:90:e2:02:24:7a:4a:d4:66:13:72:75:b8:86:
0e:21:93:98:c2:69:b0:d0:64:25:36:7e:82:99:af:
5e:b3:7c:b2:86:a8:2d:1c:97:cb:b9:20:00:4b:1f:
7d:35:2c:20:b3:a7:60:4d:0d:39:ce:43:e6:2b:04:
49:11:82:5a:6b:2a:32:3d:dc:35:bc:74:a8:35:08:
e8:aa:8e:1a:ff:4b:a7:84:a5:e9:5e:a3:d6:99:72:
70:32:a7:38:12:62:04:94:bc:f0:e5:9a:2b:5e:61:
ba:5c:4b:81:91:ed:5b:17:ef:87:49:d9:d3:e1:c3:
89:f5:8d:6d:45:80:4e:a1:f8:04:79:7c:97:07:0b:
27:5e:69:51:e0:47:17:3d:a5:e5:e9:5f:74:98:c4:
e3:0b:e6:32:85:65:ba:55:8f:5d:8e:dd:95:ae:21:
b5:30:1c:8f:ff:7a:fb:75:fb:82:b2:c5:cb:72:67:
9d:7e:84:d7:f1:42:4e:6d:cd:21:77:8c:6d:1b:da:
18:f8:b5:5d:8e:a6:96:be:a1:e4:30:f3:34:0f:ef:
fb:42:4d:ca:ab:cc:ca:fd:1c:a7:4b:1a:f6:0a:90:
7d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137526
sbgp-ipAddrBlock: critical
IPv4:
103.111.224.0/22
IPv6:
2402:a1c0::/32
Signature Algorithm: sha256WithRSAEncryption
46:90:6b:ff:14:0f:57:dd:6b:49:bf:87:08:7d:08:d8:93:2d:
f9:93:9d:3c:fe:dc:41:ae:32:c9:89:e5:78:e4:03:dd:5c:b7:
1c:85:c7:60:fe:c3:b5:c2:71:ae:1e:64:0a:fb:28:bc:db:d2:
38:f1:af:77:b6:df:64:70:fb:2f:b6:18:4e:9d:27:77:12:1c:
e2:40:27:a3:67:6e:4e:b3:ce:d2:2c:84:53:a8:51:f1:a9:2b:
a1:0b:c4:b3:7f:46:f3:61:6e:b1:50:bd:ea:22:85:e3:50:be:
a4:1c:43:0f:26:20:25:2c:65:40:9c:c7:35:89:18:f5:34:6e:
91:5a:23:02:83:2d:ad:db:d5:ad:f7:78:3c:f6:8b:00:0c:72:
11:5e:4e:2c:ad:41:ec:bc:13:11:3f:d9:24:25:c8:b6:7d:10:
50:6d:1d:4b:73:b3:ed:d8:03:73:3b:96:c1:f9:dc:c6:3e:38:
dd:ac:cc:77:a5:cb:a9:17:ad:ab:e9:d9:6b:e6:0e:29:61:98:
c6:99:32:11:52:0d:f7:be:8a:56:a9:f4:b8:34:18:13:f1:fa:
91:1e:47:0b:ba:78:33:83:af:41:86:41:a3:6b:d1:c1:10:1c:
8b:e7:16:d3:ed:67:06:3a:1a:8c:4c:1d:82:4d:b4:5f:60:28:
30:6e:ef:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:02:32 2026 by rpki-client