Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer
File: fd08hfmnH2JfzMEMqDHld3CbTz8.cer (raw, json)
Hash identifier: 6lXWs0kOmJvw8JfOT7FxNAt2GTV6QMJSjJ42zByr/dU=
Subject key identifier: 7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BD9D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 16 Jun 2026 13:20:47 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 149815
IP: 103.186.252.0/23
IP: 2400:7760::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179613 (0x2bd9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 16 13:20:47 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A9167B41, serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:00:69:ad:b2:03:35:44:63:50:e6:0e:35:
a0:af:e2:82:b2:bf:ae:a5:94:1e:1d:e2:e7:ec:4e:
56:20:f3:f8:2d:a7:99:ed:9c:e3:b8:c4:d5:c8:38:
9c:45:51:49:91:2b:05:01:8b:a3:69:4a:56:bf:7c:
a7:b2:4f:b3:5d:c7:d8:96:63:26:2d:43:39:02:8f:
2f:2c:ab:38:69:12:ef:ec:64:cd:f2:04:42:80:82:
3d:08:64:ac:d1:ad:a1:76:6e:ee:b7:c1:1e:c9:c3:
cc:ca:53:14:7d:8e:2d:73:db:c2:ee:18:ba:e6:4c:
34:51:b2:2f:89:14:aa:fb:ba:a4:d0:8c:d6:ac:b0:
a6:aa:eb:4a:62:7e:0a:ef:32:88:5d:55:72:15:8d:
5f:eb:1d:f2:8c:c9:fa:14:77:11:4b:ab:95:32:33:
ce:27:9d:60:e4:5f:9a:95:58:ba:98:62:61:3e:d8:
cb:7b:d8:b7:c3:47:b9:f0:2a:37:f8:36:b1:b4:ae:
df:6f:11:56:cb:98:eb:78:d9:38:b9:57:76:48:4b:
77:bf:aa:04:b0:d9:1f:50:f9:23:c9:68:d8:95:8f:
da:13:87:c5:a6:31:10:26:5d:0f:87:d5:a7:50:21:
ce:8c:9d:78:8b:19:1a:2b:29:38:45:8b:23:de:ea:
a5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149815
sbgp-ipAddrBlock: critical
IPv4:
103.186.252.0/23
IPv6:
2400:7760::/32
Signature Algorithm: sha256WithRSAEncryption
5d:0e:6a:dc:6f:1b:96:7b:bb:cf:6e:f5:a3:3c:5a:cb:b4:12:
64:4c:07:e7:b9:70:20:f7:90:bc:f8:15:b7:10:07:6c:c7:a7:
e0:02:bd:cc:5a:4f:64:30:34:84:b9:26:45:7c:2a:7e:b5:f8:
fb:50:25:3f:b0:80:ef:fb:62:d1:fd:d1:3d:0f:4a:d3:af:f4:
ef:74:c8:68:5f:ec:c5:43:1a:76:5d:e4:4b:09:da:05:d5:a4:
52:39:6d:3e:56:6b:7e:36:38:a3:26:90:c2:02:2b:3e:32:4b:
41:e0:9a:91:ce:82:e3:3a:67:ea:fb:9a:0a:1f:e8:b1:36:ab:
db:75:f9:96:bc:96:75:48:08:1a:fe:10:e1:61:7a:86:af:87:
6d:09:56:a4:62:81:aa:d8:59:1d:7f:c4:92:af:98:ad:9d:88:
ba:48:c6:ce:fe:fc:4c:10:da:c3:2e:95:bc:ee:df:02:6d:18:
33:c4:91:d0:7d:c8:b7:53:54:92:88:9c:d0:a2:e9:02:8a:0f:
0d:f7:1b:66:f7:27:df:a2:ac:65:d7:24:41:91:d6:85:bd:7c:
30:d5:7c:c7:d4:6e:18:94:d4:3d:17:80:bf:5d:34:0e:e2:cf:
46:1e:c8:73:42:11:7a:9c:34:4e:81:17:27:af:1c:90:e8:fd:
0d:37:69:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:16:19 2026 by rpki-client