Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer
File: hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer (raw, json)
Hash identifier: Nb3sPulQ7e6drEylRLrF/8fqUX9FA5issyCQF1dfGdA=
Subject key identifier: 84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C3A6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Jul 2026 12:29:10 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 134356
IP: 103.140.10.0/23
IP: 2405:4c40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181158 (0x2c3a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 8 12:29:10 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A911C743, serialNumber=84E4FFB6927F77F5C3F0A252682F71DDB377B11D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:9e:c6:59:cf:23:4f:2a:e9:f9:d4:27:a1:
ff:46:f8:38:f2:78:a4:56:84:01:59:88:ae:12:df:
c6:7a:e0:19:9d:26:e4:42:88:a8:d2:72:75:ab:77:
47:f3:0e:5c:66:22:5f:a9:84:7a:88:ea:23:1e:7a:
25:f0:1d:9d:88:a6:74:41:67:86:dc:55:5a:75:4f:
aa:d7:37:39:54:b7:66:be:89:a4:41:f2:63:f0:40:
db:9b:07:da:0a:c9:45:24:dd:97:e5:e8:d3:47:af:
86:2f:59:22:85:52:c1:ea:c7:79:12:0c:be:73:4c:
28:91:58:cf:a5:c5:e3:8a:32:69:95:01:fd:4f:0a:
e0:15:71:ae:bf:a8:10:f1:95:f9:44:40:3a:36:7b:
92:8f:3c:6b:55:bd:91:af:55:59:04:18:d0:94:ce:
59:78:a6:96:6a:3e:2f:bc:2b:3f:19:0c:a5:b7:27:
13:7d:19:5b:50:91:e0:2f:7c:b4:31:da:14:a1:5c:
d9:f5:5e:bd:c2:3c:4d:18:5a:8e:50:4f:ee:23:e2:
21:41:85:b5:71:92:da:b4:0a:53:10:b6:f0:17:47:
bd:c2:cb:6a:87:cc:a4:58:41:11:06:08:1a:d9:27:
d1:a5:6c:ae:01:0e:86:bc:74:fc:80:33:b8:d5:aa:
40:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134356
sbgp-ipAddrBlock: critical
IPv4:
103.140.10.0/23
IPv6:
2405:4c40::/32
Signature Algorithm: sha256WithRSAEncryption
c5:28:59:c3:50:f4:67:db:f7:4e:3b:6e:f9:cc:1b:3a:27:12:
5f:b0:9d:28:6c:c1:6f:25:a6:15:e5:09:be:90:8d:d1:63:22:
9f:ae:17:39:0b:f9:c3:1e:03:22:ff:06:57:2d:06:a1:54:c3:
d6:f1:06:ed:ff:53:5e:d8:53:9e:e8:97:b7:fc:2c:62:cc:16:
27:72:7c:12:40:83:d8:14:18:6b:72:54:0a:6c:d2:83:4e:9e:
41:7c:2c:fa:d9:c4:ca:b2:0a:7c:a2:fa:b5:58:50:ed:e5:6a:
8f:b5:65:18:a2:ca:65:1a:fd:c3:ee:8a:5c:62:f3:9f:79:73:
4a:cb:35:73:da:6e:ae:ab:b9:8a:87:af:86:fb:06:38:c0:7e:
eb:f7:66:f8:f2:a1:86:b6:fa:82:36:94:d6:91:19:46:29:31:
46:b5:c3:7f:e9:8c:26:06:20:1c:c0:31:51:6d:dc:24:71:3a:
14:58:70:8a:69:7c:ee:1b:34:3b:33:62:2b:c8:93:d6:22:16:
e6:91:62:9f:5c:11:ed:74:75:05:5d:be:cb:e6:e6:af:45:a5:
a1:5a:94:6c:e8:91:21:97:c9:c9:43:eb:9a:fe:8b:01:1c:09:
fc:37:c7:8f:29:10:f1:99:c0:49:46:ae:c4:8e:4d:4d:07:3b:
ef:ae:7e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:25:44 2026 by rpki-client