Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer
File: hrHxHRgdpsydsDI95DvJbFkJZeE.cer (raw, json)
Hash identifier: rjQr5OTwVu7meApmzapUmDsDT5mymYNLR4H0s+41EDo=
Subject key identifier: 86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 028FDE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 17 Feb 2026 14:05:31 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 139902
IP: 103.146.148.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 15:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167902 (0x28fde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 17 14:05:31 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91CBFCF, serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:8b:8b:95:5e:f7:39:52:f4:53:a0:89:d2:
58:03:66:2c:ff:bd:4b:91:d1:f9:59:b0:3f:61:9f:
d7:3d:5b:a4:be:e6:ed:0f:fd:99:56:8f:74:95:e2:
e8:56:97:07:bf:19:ef:b4:23:42:4c:a2:da:1d:3e:
54:43:59:4c:d2:ef:94:67:27:a3:65:02:f0:54:eb:
85:4a:4c:f5:0f:76:48:64:7b:97:e3:ed:d0:db:35:
b0:e3:81:62:c9:88:e1:75:25:08:4b:fc:5b:1a:3a:
11:ee:7c:3d:6e:51:20:41:6e:a2:9e:51:79:50:3d:
0e:9b:12:47:ec:4c:37:3c:0b:8c:07:fb:34:29:28:
36:c1:e8:4c:4f:0f:29:84:75:72:14:af:12:c2:9f:
d0:d1:f7:8a:ae:7f:1d:ee:d6:22:90:e1:6b:c6:bf:
ce:49:b2:73:e7:17:d6:40:2d:34:c7:69:da:6c:55:
67:8f:8a:db:02:30:ad:8c:02:17:41:5b:f7:75:5e:
b3:38:43:f8:0d:c9:17:ce:d2:10:b3:5b:2f:08:2e:
e5:58:95:5d:11:88:08:4b:17:94:08:8c:84:62:90:
5a:95:1d:f6:e5:7d:01:82:ec:26:2b:22:e5:0e:0f:
85:89:e0:1b:c4:b4:27:95:a4:9d:ce:d8:49:65:7c:
7d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139902
sbgp-ipAddrBlock: critical
IPv4:
103.146.148.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:f7:f8:40:05:25:c9:3c:a7:14:ad:ad:2b:f2:0d:1d:48:c6:
1e:03:e2:e9:ba:5e:25:a7:ec:4d:11:2b:20:06:89:55:bf:c3:
38:3b:3f:c7:52:23:12:f6:07:ab:d3:2f:be:70:93:66:89:0f:
34:36:e1:87:71:84:0e:8e:6f:ad:ec:4a:58:7e:8b:e2:ca:a5:
61:1e:fa:3c:24:b3:c2:95:c6:5d:77:b8:5b:5f:91:8a:08:3e:
4c:a1:ea:3c:1a:de:df:e6:11:a7:a6:87:9a:0d:83:dc:0b:bd:
b4:f2:61:83:1c:ab:d3:f4:3f:da:8f:bc:ac:f6:23:63:e6:b4:
8e:90:d1:a5:e7:29:57:34:0f:dc:43:e1:12:06:fc:8b:dc:3f:
f7:f7:07:19:ed:2a:45:a7:a4:09:4a:0a:fa:aa:0d:3f:14:29:
2e:0c:2e:52:6e:af:b7:2f:85:e0:7a:8e:0a:e7:13:9e:05:f7:
17:32:59:c5:9e:ec:60:7f:e3:9a:44:3c:12:de:b5:b4:a3:5b:
7f:5a:14:e2:10:54:b2:37:cb:36:4f:81:d0:f0:91:32:36:55:
f2:a1:48:5a:d6:2f:c1:4b:4f:a0:46:c3:d1:17:9e:0b:45:4f:
78:d6:4a:e6:a9:4c:fe:3f:95:81:b9:df:00:cd:54:ae:17:05:
60:46:8a:01
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAo/eMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIxNzE0MDUzMVoXDTI3MDMzMTAwMDAwMFowRjERMA8G
A1UEAwwIQTkxQ0JGQ0YxMTAvBgNVBAUTKDg2QjFGMTFEMTgxREE2Q0M5REIwMzIz
REU0M0JDOTZDNTkwOTY1RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/zYuLlV73OVL0U6CJ0lgDZiz/vUuR0flZsD9hn9c9W6S+5u0P/ZlWj3SV4uhW
lwe/Ge+0I0JMotodPlRDWUzS75RnJ6NlAvBU64VKTPUPdkhke5fj7dDbNbDjgWLJ
iOF1JQhL/FsaOhHufD1uUSBBbqKeUXlQPQ6bEkfsTDc8C4wH+zQpKDbB6ExPDymE
dXIUrxLCn9DR94qufx3u1iKQ4WvGv85JsnPnF9ZALTTHadpsVWePitsCMK2MAhdB
W/d1XrM4Q/gNyRfO0hCzWy8ILuVYlV0RiAhLF5QIjIRikFqVHfblfQGC7CYrIuUO
D4WJ4BvEtCeVpJ3O2EllfH1jAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUhrHxHRgd
psydsDI95DvJbFkJZeEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNCRkNGLzk1NjM5QkYwMjQ4RDExRUFBREEyMDU0RUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDQkZDRi85NTYzOUJGMDI0OEQxMUVBQURBMjA1NEVDNEY5QUUwMi9ockh4SFJn
ZHBzeWRzREk5NUR2SmJGa0paZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiJ+MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5KUMA0GCSqG
SIb3DQEBCwUAA4IBAQDR9/hABSXJPKcUra0r8g0dSMYeA+Lpul4lp+xNESsgBolV
v8M4Oz/HUiMS9ger0y++cJNmiQ80NuGHcYQOjm+t7EpYfoviyqVhHvo8JLPClcZd
d7hbX5GKCD5Moeo8Gt7f5hGnpoeaDYPcC7208mGDHKvT9D/aj7ys9iNj5rSOkNGl
5ylXNA/cQ+ESBvyL3D/39wcZ7SpFp6QJSgr6qg0/FCkuDC5Sbq+3L4Xgeo4K5xOe
BfcXMlnFnuxgf+OaRDwS3rW0o1t/WhTiEFSyN8s2T4HQ8JEyNlXyoUha1i/BS0+g
RsPRF54LRU941krmqUz+P5WBud8AzVSuFwVgRooB
-----END CERTIFICATE-----
Generated at Thu Feb 19 17:26:55 2026 by rpki-client