Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer
File: 0zOneHph_4bHRbR0CWr2muMaz_E.cer (raw, json)
Hash identifier: feEKBTFwQ1cs35Z6/aqZD3cz/x8X2Gl7SX1IwIUZ+TU=
Subject key identifier: D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B4ED
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 15 May 2026 12:22:27 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 142146
IP: 103.166.232.0/23
IP: 2001:df6:9c80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177389 (0x2b4ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 15 12:22:27 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A911309C, serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c2:be:2b:26:0e:bf:32:16:03:01:e1:87:3b:
3f:d3:14:93:f4:31:9a:15:c8:3a:74:6e:09:c7:7a:
3b:73:c0:2c:a0:9b:33:10:8a:86:ae:f6:22:cc:56:
08:8e:e4:c6:5c:d4:24:88:37:a4:1e:34:ea:ba:27:
76:f9:82:7c:f0:92:75:81:60:f2:db:29:c3:63:76:
30:0c:44:40:a1:e0:84:19:07:c0:95:2e:23:49:33:
88:f3:54:13:01:bc:95:dc:70:ae:e2:ed:06:39:fa:
a4:e2:14:89:9f:bb:19:71:91:80:46:0f:08:90:90:
49:98:07:0a:61:92:88:97:bc:c6:bb:1f:bb:a6:93:
fe:17:df:3e:67:41:eb:1e:0d:8d:15:9d:43:4e:a6:
52:ef:ef:8e:0a:8c:40:ad:a8:3e:d1:94:d4:17:bd:
ea:31:30:f7:38:67:04:b2:dc:92:f2:45:bb:4a:52:
35:d0:63:a3:46:f2:d5:2d:8f:8c:0f:f0:c8:d0:f7:
c1:c5:01:48:9f:9e:18:99:b4:fd:62:28:67:e2:e6:
b8:59:94:46:2a:4a:42:c9:34:93:d6:79:4f:d4:ca:
cb:8f:16:f2:df:72:52:1e:b9:65:31:56:e0:07:eb:
dd:0e:c3:5e:8f:5d:16:1a:4b:eb:48:a6:b1:1c:80:
62:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142146
sbgp-ipAddrBlock: critical
IPv4:
103.166.232.0/23
IPv6:
2001:df6:9c80::/48
Signature Algorithm: sha256WithRSAEncryption
55:76:c7:e9:3a:69:5e:d9:79:b9:50:0f:88:ba:2b:18:71:e6:
38:be:82:0d:a8:45:69:79:16:11:b3:75:e1:c1:f8:38:8e:c8:
e1:3e:f1:db:fc:d8:23:bf:6d:e6:01:37:ba:91:2c:a3:3b:75:
4c:21:eb:8c:24:36:ab:c6:86:80:38:c0:d0:11:70:78:5a:92:
02:22:78:da:d1:d3:1b:9d:8f:2e:a1:9a:f0:ae:18:ca:c7:fd:
d8:eb:25:74:df:24:fb:49:11:ae:fb:d4:be:14:b8:35:8f:65:
3f:48:2a:e1:c5:5b:a5:93:b2:fe:b2:d5:c9:f1:30:f5:bd:f6:
ab:c6:99:fc:f3:dc:01:47:4b:4a:c3:4a:0f:c7:e9:01:29:8c:
24:5a:b9:ce:3d:ef:4c:34:44:d8:38:b0:52:53:ee:30:90:51:
f7:13:1c:c3:eb:ea:41:ae:ea:1d:8a:5f:99:7a:57:8c:79:e1:
d4:41:04:52:7d:6e:df:55:15:33:3f:3f:ab:b6:3c:85:58:d7:
6d:f5:b4:95:32:c8:5d:09:cf:55:6e:51:0e:de:a1:a1:97:ab:
a3:d6:70:b3:73:db:c0:63:8e:d9:4f:4a:90:30:18:25:d8:72:
a6:29:67:7f:be:08:c8:6b:d8:23:11:a7:90:75:8d:92:c4:3f:
68:6f:36:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 16 22:00:50 2026 by rpki-client