Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
File: eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer (raw, json)
Hash identifier: eLtAs6uSVraF8KngeOduXmCEB7aHHP4EJIhdnW+p1Z0=
Subject key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B134
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 May 2026 13:04:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 133104
IP: 103.152.248.0/23
IP: 119.252.176.0/21
IP: 2405:c400::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176436 (0x2b134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 1 13:04:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ea:17:cb:37:17:49:d3:05:f4:e3:80:9b:29:
44:36:ef:5b:19:ba:d2:51:40:71:eb:20:2f:12:43:
f0:86:48:d6:33:07:0b:86:a1:6a:07:14:87:0c:29:
77:ea:74:ba:0a:8e:01:91:63:45:cd:b9:b2:7c:b9:
4c:af:20:d4:cb:a8:33:79:42:9b:f1:38:a0:87:09:
6d:6a:6f:84:30:9f:e3:32:41:61:59:b6:b7:09:b6:
43:d2:26:8e:61:e6:85:28:37:ba:40:12:5c:44:13:
73:8d:a5:55:9a:d8:5e:5d:1a:a2:69:ed:46:60:10:
f8:48:50:d7:05:6e:0b:7d:59:44:21:0a:f0:29:61:
cf:e9:72:1d:5b:5f:af:fc:b4:c1:44:f7:2c:16:9a:
9a:81:90:97:ae:15:a6:dd:b0:5b:16:04:2b:43:48:
8a:cb:02:b5:c4:38:66:0c:b1:0d:b1:39:e6:14:a6:
d8:cc:b0:a0:d0:b0:82:ea:c7:5f:ac:96:62:ed:df:
cf:89:90:fb:b9:2e:86:ad:99:92:6f:c5:7d:f6:c0:
51:e7:0a:24:2f:78:59:ab:4d:0a:6c:57:9b:21:a5:
34:48:a1:5c:01:6c:66:58:89:cd:b9:40:5b:9d:96:
e7:20:44:df:82:9c:a6:36:bc:f9:cd:1a:20:6b:2c:
17:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133104
sbgp-ipAddrBlock: critical
IPv4:
103.152.248.0/23
119.252.176.0/21
IPv6:
2405:c400::/32
Signature Algorithm: sha256WithRSAEncryption
7f:83:33:7b:c1:fa:a8:45:3b:0f:7d:74:f3:a9:13:17:54:19:
a0:db:f1:2e:64:3a:2b:a7:46:97:55:77:52:78:d3:ae:95:26:
ba:e5:f8:a4:46:a5:27:b7:4f:93:a7:cb:3c:f7:ba:8b:e7:40:
3d:77:cd:5b:e7:47:4d:19:6b:41:00:4d:e3:09:35:8f:6a:44:
75:ca:b3:83:8e:6a:a6:e3:5c:eb:ca:29:5a:00:d3:9b:3a:8a:
ba:68:ff:cb:70:db:3c:ad:7b:80:76:41:73:19:52:5e:ad:21:
a7:18:a2:b9:8f:77:6f:69:b8:b7:c2:55:52:1d:b6:ad:2d:b8:
10:ca:4f:aa:b5:a7:67:25:50:6b:8a:5d:a7:3c:ce:a3:12:71:
04:88:a0:b9:bb:b9:f9:32:1a:84:64:f7:5a:09:3c:5a:b7:87:
7c:93:8b:a2:e4:3e:c4:3e:c0:29:b6:68:f8:92:27:8c:92:00:
56:08:cf:f6:6e:b4:18:6d:74:06:92:df:aa:2f:9f:43:1f:bf:
d8:02:8b:9f:8d:29:ad:38:bb:24:59:a3:d2:66:50:83:df:23:
4c:a4:71:ea:c7:fe:b4:fa:e9:05:57:06:3d:d7:7e:5d:5b:69:
3a:b9:91:05:8d:fc:7e:f7:1d:0a:95:35:9f:fd:10:44:a7:de:
2e:e2:a6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:00:47 2026 by rpki-client