Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer
File: HtdycKSBilV07-7Kyvt0g812iCE.cer (raw, json)
Hash identifier: G0LWPLXTtihDBGDUZ9rWUsA4QU3eG4/mMLXKhMuzjLc=
Subject key identifier: 1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A183
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Mar 2026 14:49:11 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 137033
IP: 103.149.72.0/23
IP: 2001:df5:c780::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172419 (0x2a183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 2 14:49:11 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91CFE58, serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:15:d2:17:cd:f0:ae:b8:d9:64:43:75:36:
d3:84:e8:6b:a2:05:86:3f:ec:f5:5d:d1:78:32:bc:
bb:32:b4:f7:02:6b:8e:e0:12:37:b0:e2:3d:73:9f:
56:75:1f:03:df:58:8b:71:de:a1:14:bd:35:39:23:
c7:85:ba:1d:da:a8:32:bd:79:1a:63:47:ad:01:77:
85:1b:3b:60:ec:33:e2:19:89:ca:23:94:4d:0c:a4:
be:42:2d:87:29:e7:23:e3:e6:fb:d4:e8:ba:15:39:
82:3d:c6:2b:29:5e:4a:e3:d0:42:4d:c1:49:e3:19:
39:0c:e1:49:5e:84:ca:11:6c:eb:c3:e7:08:55:6d:
f0:9b:bb:1e:75:5e:d9:1c:ed:84:99:fc:6e:3a:d7:
84:e4:ed:ca:36:79:73:18:c0:d9:4c:ba:96:fb:4c:
e6:f6:1e:00:d2:fb:a3:f7:fb:56:5f:87:ed:c4:c7:
20:93:05:20:0f:e1:e4:bd:ef:9a:75:71:17:54:d8:
71:9f:a2:51:e1:51:e7:ba:b1:aa:7f:ab:5d:74:31:
c8:b8:5f:ed:a8:bb:65:3b:80:fc:67:4b:53:5a:6b:
30:9b:2d:62:76:a1:9a:53:b8:ac:8a:e8:78:61:a8:
91:41:9a:5e:70:e0:7e:5b:07:99:07:5c:c7:f8:2b:
d8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137033
sbgp-ipAddrBlock: critical
IPv4:
103.149.72.0/23
IPv6:
2001:df5:c780::/48
Signature Algorithm: sha256WithRSAEncryption
b8:14:34:96:ae:05:9b:31:39:5b:a1:20:b9:b3:03:90:49:17:
4d:be:a3:1e:a0:b0:3a:87:54:f3:40:09:fa:e2:83:8d:8e:92:
15:d5:b3:b5:72:7a:99:17:5d:94:f6:6f:82:36:cd:d3:72:61:
95:50:32:14:d2:4b:9e:be:65:8c:ec:cb:04:c8:18:1f:53:e2:
f0:a9:89:ac:11:1c:95:15:f0:46:9e:a0:01:06:b3:44:a0:53:
f3:64:19:a1:d5:cd:1b:9e:75:0b:47:07:60:2c:97:a2:58:e2:
ae:b9:e9:22:cb:c8:60:01:94:31:f4:c1:6d:a9:96:c3:81:5b:
e7:19:7d:ef:01:52:29:6e:fb:68:d6:6d:a0:68:59:6c:81:98:
83:93:06:e9:d6:cd:f1:d6:e2:71:b0:6a:84:9d:b3:66:c9:70:
f6:3b:3b:57:87:69:a8:5c:c0:b7:c9:a2:3f:a7:e4:4b:22:6d:
0e:11:81:29:ad:55:56:30:27:8a:00:96:ec:a5:55:74:09:7e:
3d:17:85:c5:c0:69:cb:85:7e:e5:80:8a:30:36:d6:c3:85:68:
af:85:8f:40:ae:46:3a:e0:8b:82:5e:49:e4:da:6e:52:fb:61:
17:73:2f:59:c0:0b:19:3e:6e:2c:34:d2:65:8c:8b:d2:24:c8:
f5:59:a5:1b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:14:15 2026 by rpki-client