
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8MVYTVzTVYviayugrfBqOytOao.cer
File: h8MVYTVzTVYviayugrfBqOytOao.cer (raw, json)
Hash identifier: hzeODbd+7x+QXqVWEtyTlUcz+jL+FEo5J1ygxAp0m1k=
Subject key identifier: 87:C3:15:61:35:73:4D:56:2F:89:AC:AE:82:B7:C1:A8:EC:AD:39:AA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B29A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 06 May 2026 03:24:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 138962
IP: 103.137.190.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 12:45:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176794 (0x2b29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 6 03:24:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91B821A, serialNumber=87C3156135734D562F89ACAE82B7C1A8ECAD39AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:81:89:2c:39:e6:98:92:24:fa:c5:b3:47:
43:d4:7b:1c:9f:0a:be:a6:b2:1d:b9:47:04:3e:89:
3c:f3:6e:a8:b9:76:22:d7:e2:73:d4:2d:21:be:ff:
b5:d1:bb:20:b6:6e:d6:c0:05:74:8b:ac:18:23:15:
5e:0e:59:b2:0a:34:83:c4:8f:6c:95:d9:33:f0:3b:
89:a9:f0:1f:04:0c:db:ac:bd:3c:ff:48:38:77:c9:
af:78:bf:83:dc:93:23:1f:9a:89:c5:ad:00:4e:44:
f6:c7:06:de:8b:65:57:88:11:01:c1:03:0e:b6:41:
20:15:26:ef:87:c6:dd:f7:28:26:96:fc:4e:89:86:
c3:65:c0:df:bb:e0:4f:f1:60:1a:0a:85:9f:f7:6f:
b8:3f:f9:9b:c0:03:c4:40:8a:07:fe:52:4a:09:ac:
22:22:55:42:f6:22:09:6c:e0:73:c5:56:5e:17:cc:
93:84:d8:ef:6b:ae:b7:7a:e3:e7:46:85:03:26:40:
69:8b:84:cb:71:ce:c9:d1:d7:de:9d:03:61:7a:1d:
40:89:c9:fb:ba:49:9d:e2:11:43:f0:74:7a:e0:dc:
30:08:a7:5b:b4:43:b2:fe:06:94:04:bf:7f:9e:55:
b9:b2:37:ec:9a:95:bd:2b:55:6c:86:8a:28:d1:7c:
2d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C3:15:61:35:73:4D:56:2F:89:AC:AE:82:B7:C1:A8:EC:AD:39:AA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B821A/242D846648FB11F198E3E3D892833773/h8MVYTVzTVYviayugrfBqOytOao.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138962
sbgp-ipAddrBlock: critical
IPv4:
103.137.190.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:0c:9c:e0:63:c7:71:1d:4a:ca:89:3a:ff:06:8a:04:42:cd:
d5:9e:72:ef:62:aa:ef:97:93:27:ea:b2:81:f5:54:ec:9d:0f:
83:db:b8:79:bb:d8:5b:70:f7:cb:bd:f6:d8:a3:75:13:24:8c:
80:cc:8d:88:15:12:e7:50:1d:5d:fe:44:4b:4b:ad:e0:84:f6:
fe:4b:3b:bb:25:2b:52:87:c1:af:2d:3c:45:24:98:cc:e9:ae:
2a:22:52:2a:52:5f:51:28:55:31:ad:4c:12:65:fb:bf:f7:f9:
9f:7d:47:63:e0:9d:70:4a:4a:0d:9d:f7:01:e2:f4:43:fb:57:
dc:39:7e:ab:ed:37:97:fd:30:e3:6d:98:6e:f3:ad:4b:d7:a6:
4e:f7:9a:3e:da:c3:aa:94:3b:dd:a5:ec:cc:c6:3d:ea:9f:de:
fa:09:b4:9a:05:af:4f:09:d8:b1:20:69:99:4d:cd:09:e7:31:
18:34:e6:e8:5f:2b:91:b0:45:46:51:48:f1:f6:16:86:48:fb:
7d:3f:c5:7b:58:bb:55:9b:28:39:00:d7:65:f9:de:70:76:76:
f8:1c:49:19:20:96:78:82:79:27:e1:06:b4:f6:55:e8:f4:fb:
17:b7:b7:b0:20:61:e9:35:20:9d:66:ef:60:5b:77:6d:57:e3:
3a:fe:dc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:03:00 2026 by rpki-client