Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
File: hlng_trNtpATntXTNVh0di16GJ0.cer (raw, json)
Hash identifier: PgUB2f7kbpsPQd8qXvveOuDV2vXzTAIBn0fTdY0qfxU=
Subject key identifier: 86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A591
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 21 Mar 2026 02:52:50 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 133059
IP: 43.246.180.0/22
IP: 103.241.76.0/22
IP: 2407:d100::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173457 (0x2a591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 21 02:52:50 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A91AC0BB, serialNumber=8659E0FEDACDB690139ED5D3355874762D7A189D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:35:06:12:1f:af:6f:89:89:86:35:66:04:
ad:c6:be:d3:b5:c3:e6:c5:cf:d5:e0:7f:d2:d9:ac:
16:aa:8a:4e:9a:cb:94:ba:5d:66:dd:af:2c:18:9e:
c2:c9:57:ba:35:1b:3b:e1:ab:dd:33:63:c5:e1:79:
d4:88:77:ee:5a:d1:c6:f8:f8:28:3e:4d:82:db:af:
77:1f:7f:e8:5f:7f:98:35:95:b2:ce:30:db:6e:f3:
1a:c6:0a:3a:26:7b:84:03:78:1a:97:52:95:78:28:
72:31:56:7b:dc:e1:ae:f9:8f:86:aa:ea:2d:38:16:
53:e7:ff:0b:f0:5f:6e:c5:6b:fc:b6:06:f9:3a:b8:
79:4a:72:9f:a2:00:f8:70:8a:5c:b9:85:eb:14:af:
ca:0f:38:6c:7d:56:1f:a4:bc:77:0c:6f:0f:44:f5:
e2:40:81:f7:43:29:48:16:30:0d:34:06:1d:2e:fc:
f4:3b:92:64:ce:ae:69:23:5b:9d:b7:42:c4:1d:e5:
e1:80:5d:70:31:45:39:be:65:38:9b:17:b4:38:a0:
d0:85:e6:de:3c:6e:cf:ec:c3:37:0e:06:42:98:03:
f1:da:b7:8f:5c:12:a2:77:cb:71:db:46:e9:2d:f1:
6a:15:4a:88:ad:64:89:f6:6d:06:b8:06:92:b4:cd:
4a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133059
sbgp-ipAddrBlock: critical
IPv4:
43.246.180.0/22
103.241.76.0/22
IPv6:
2407:d100::/32
Signature Algorithm: sha256WithRSAEncryption
d8:45:d8:94:e0:68:6e:e4:9a:f7:b0:53:33:76:6c:f0:d5:4b:
ca:bd:c5:7f:de:44:a4:9e:d2:70:c0:dc:ed:c0:c6:7f:27:2a:
b6:61:f0:4a:cb:b3:02:f9:e3:7f:37:8e:d9:8f:2d:f1:02:33:
f0:a6:ca:a0:e4:0b:99:14:24:50:a3:f8:1c:89:6d:da:44:0b:
b6:9b:9d:91:25:b0:ce:db:59:30:55:65:a5:b0:78:31:86:d2:
a7:78:90:79:41:89:a8:be:53:2a:69:42:db:12:cf:3a:c7:ee:
99:8c:11:b9:9f:44:f5:7f:36:f6:5d:b3:dd:cb:a4:4d:19:62:
a5:b0:20:71:82:57:e8:68:42:c8:0c:2e:2d:61:0a:1f:30:ed:
49:b4:1f:21:dd:70:c2:09:7d:40:5e:a0:b4:13:05:1d:2a:a5:
b7:c4:1b:f7:5c:ff:b1:bc:c0:af:d1:95:84:c7:7a:13:fa:49:
c7:45:8a:ea:8d:35:60:41:e3:a4:91:84:f3:d6:30:70:68:e7:
b2:6a:89:1c:ec:10:f2:9f:d5:dc:44:95:79:76:b2:f9:ab:28:
ba:d5:62:45:99:f9:54:0a:37:6b:61:38:15:46:a8:59:9e:1a:
3e:4b:24:a1:ed:ec:14:85:7b:1b:08:ff:63:ae:46:8c:54:5b:
ae:31:a6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:43 2026 by rpki-client