Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHxYDmWjk_DB9bgxlTVo9vbpxV8.cer
File: hHxYDmWjk_DB9bgxlTVo9vbpxV8.cer (raw, json)
Hash identifier: eGIrcuwzSni06jNYoHISS2fGNPpX+4lwjG8dY//8YT0=
Subject key identifier: 84:7C:58:0E:65:A3:93:F0:C1:F5:B8:31:95:35:68:F6:F6:E9:C5:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02CB2B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AA71B/916B2442909111F1A0EC0D896911F970/hHxYDmWjk_DB9bgxlTVo9vbpxV8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AA71B/916B2442909111F1A0EC0D896911F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Aug 2026 05:50:36 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 141388
IP: 103.249.118.0/23
IP: 2001:df3:140::/47
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 07:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183083 (0x2cb2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 5 05:50:36 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91AA71B, serialNumber=847C580E65A393F0C1F5B831953568F6F6E9C55F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:67:bf:76:3c:04:a4:c7:be:1e:d7:f9:92:16:
b6:7b:b2:c9:1a:ba:5b:21:ce:e9:b0:71:46:30:4a:
33:20:54:ed:4c:0a:1a:d3:48:da:fb:f6:b9:9c:c6:
5a:29:04:63:ff:6e:02:58:c3:85:2c:95:cc:f8:95:
46:26:d3:e8:d7:3e:76:db:33:7f:c0:32:3a:e7:10:
c3:bd:01:d6:07:38:2d:72:58:01:41:77:d4:2f:10:
16:08:cf:9c:7e:c0:de:e8:3a:b2:97:e2:ec:b0:29:
40:8c:fe:60:fc:49:03:16:84:ea:60:f3:c1:82:d5:
7f:12:9d:4e:02:12:de:2d:fd:0f:16:1a:49:7f:03:
a2:85:3b:9f:0f:07:2b:30:b2:fb:6f:b5:dc:3a:0a:
84:e8:bb:13:a0:4e:c9:4a:be:69:42:c5:f2:1e:e7:
c8:14:15:d5:de:27:be:d7:54:66:43:01:f0:28:bf:
14:fe:8f:23:5a:3c:81:ea:67:81:12:80:0f:3c:17:
db:3d:46:4e:42:27:2b:f8:7b:58:5e:39:53:85:f7:
7b:31:83:0f:c2:4d:a6:08:2f:18:a9:34:e6:40:a6:
64:8d:de:2a:03:a5:f6:ca:0d:67:22:21:51:4f:45:
16:90:67:1b:b3:df:14:76:81:a6:7f:a8:85:e9:65:
f3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7C:58:0E:65:A3:93:F0:C1:F5:B8:31:95:35:68:F6:F6:E9:C5:5F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AA71B/916B2442909111F1A0EC0D896911F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AA71B/916B2442909111F1A0EC0D896911F970/hHxYDmWjk_DB9bgxlTVo9vbpxV8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141388
sbgp-ipAddrBlock: critical
IPv4:
103.249.118.0/23
IPv6:
2001:df3:140::/47
Signature Algorithm: sha256WithRSAEncryption
24:c9:48:2a:54:a1:37:ea:16:47:24:dc:2e:ff:9e:e5:14:40:
6e:41:8b:60:1e:a7:03:04:c6:b9:44:dc:10:32:45:c7:c8:5d:
60:9f:84:ca:e8:18:42:46:5b:24:a6:d8:74:70:13:b4:e1:fd:
b8:2f:c1:8d:6c:52:94:fc:ce:3a:19:34:ad:6f:17:11:52:b7:
f4:3d:54:d6:b2:2e:fc:af:f5:53:3a:9f:e7:b6:3a:51:a3:56:
77:56:a3:42:f9:d2:86:c4:b4:a1:8f:e1:99:34:25:7b:c7:b3:
13:2e:e3:42:70:34:3a:38:c9:5d:ae:0a:de:b2:54:b2:15:7e:
cf:19:ea:7d:5f:07:2a:4c:10:9a:76:af:45:bb:ca:ba:4c:26:
57:67:b4:46:e4:75:2b:86:8e:35:35:27:e8:ee:28:45:79:06:
43:a1:b2:8a:1b:65:bc:8e:be:0f:e1:6d:dd:04:3f:5c:65:ca:
c0:05:b3:f7:8f:cc:e6:6c:4a:79:e9:06:09:45:23:3f:8c:fd:
a4:7f:ca:fa:ba:58:f5:e0:8c:d3:a3:a1:c1:c6:07:fc:f3:a2:
e9:82:db:d9:16:a0:82:a0:f9:2f:6b:1c:ee:ab:88:9e:ac:d5:
ca:18:b5:6f:8a:a0:08:3f:18:e4:21:b8:e7:0f:28:5a:69:17:
c3:a9:d0:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:44:51 2026 by rpki-client