Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer
File: Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer (raw, json)
Hash identifier: nS9bNPCAXEFDoZX7q9H2rjRYjsCTO4q3bNJGk2hublo=
Subject key identifier: 16:8D:67:D8:E5:25:89:8B:FD:0D:DF:2E:F7:CC:41:B8:9E:B9:3C:4E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A93C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Apr 2026 03:14:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 134110
IP: 103.53.148.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174396 (0x2a93c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 2 03:14:46 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91C8BAB, serialNumber=168D67D8E525898BFD0DDF2EF7CC41B89EB93C4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:82:3e:37:59:dd:8b:a9:dc:f5:93:d5:24:f2:
f1:cd:5f:c2:93:1a:3d:68:56:f3:cd:b4:7b:e2:90:
c4:58:45:86:4f:46:81:5a:e5:25:09:2f:1f:a6:d4:
07:71:b7:4e:2a:87:ec:72:11:ca:96:3b:a1:71:3a:
1c:2c:32:3c:05:b6:da:0c:8d:c8:28:36:9e:1f:b5:
0a:82:67:b3:4c:bf:37:d1:a1:74:51:38:02:a1:ac:
27:d0:7f:7f:76:7d:ca:14:a2:12:05:65:fc:a2:83:
64:f7:3f:d3:9b:ae:63:86:3d:53:e8:cc:93:3e:f4:
fd:e8:86:a0:c8:5f:da:6e:07:81:19:11:b6:96:17:
b7:93:82:93:56:3c:c7:38:f1:6a:e5:46:01:05:59:
55:35:db:a5:a5:5f:52:43:6c:83:a7:e3:15:b3:dd:
b0:4b:f4:f4:fd:d7:d0:89:bb:24:ae:af:dd:d9:b7:
73:89:8b:14:81:a9:04:e4:73:9e:2c:6a:6e:15:90:
53:0f:62:b3:b5:1f:f0:51:14:4d:c3:f9:5d:1a:f0:
61:54:e4:6e:48:fb:07:22:1b:dc:46:88:c0:e7:06:
e1:9e:b6:28:76:98:49:2c:04:5b:3c:1a:18:94:96:
94:43:7e:80:90:95:14:b0:dc:6f:3f:b9:84:7c:e8:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8D:67:D8:E5:25:89:8B:FD:0D:DF:2E:F7:CC:41:B8:9E:B9:3C:4E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134110
sbgp-ipAddrBlock: critical
IPv4:
103.53.148.0/22
Signature Algorithm: sha256WithRSAEncryption
98:01:66:f0:9a:5c:53:6f:ed:3a:d6:94:74:ab:09:12:9f:ef:
27:cc:07:0c:97:9f:cc:2f:ba:21:a4:73:32:ec:09:38:e7:2a:
ef:5a:a4:8b:ee:f4:cc:4a:83:90:7b:19:81:3b:9a:80:78:dc:
86:b2:6b:da:1e:89:cb:9b:66:c0:08:28:0b:b6:28:39:2a:db:
4b:46:a6:62:b4:af:dd:be:25:df:74:b1:45:b7:3b:26:7d:da:
fa:6f:92:8a:1a:6f:23:32:9f:00:e3:4e:28:14:ce:ae:ed:66:
05:40:54:97:d2:86:ee:06:8e:1f:42:44:57:26:7e:60:47:50:
12:cf:ab:bd:f6:20:b8:55:c4:fe:c3:ff:79:90:87:c6:6a:16:
55:b4:b3:52:32:a8:29:4b:0a:0e:f4:8e:20:02:57:76:be:96:
68:f4:ea:a4:72:ae:24:86:9f:af:d6:33:e5:4e:a3:dd:b8:fb:
e6:bb:5d:21:af:f0:13:ea:97:3c:55:5f:3c:f6:09:10:ab:2d:
61:60:80:4d:74:3f:96:0a:4d:f9:2e:b4:47:93:c8:94:c3:c8:
d2:f9:72:98:02:ac:ce:df:b9:2f:92:98:95:ce:86:0e:ad:14:
e9:96:73:0d:39:33:ca:3d:9b:85:72:89:bf:09:9d:b5:85:c1:
df:eb:03:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 18:28:05 2026 by rpki-client