Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
File: 1vBnJNCWhwftHfr9uyJYArPaoZQ.cer (raw, json)
Hash identifier: KTi5OHeeJUtWpQ5yHWiTMM/DSer61e6PO2yx0JIymX0=
Subject key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02E071
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 26 Oct 2026 14:01:39 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 147292
IP: 103.174.98.0/23
IP: 2001:df7:c480::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Nov 2026 01:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188529 (0x2e071)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 26 14:01:39 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A91D1F95, serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:05:d4:ec:ad:0f:e0:66:31:d5:05:d1:73:01:
6a:26:7d:f4:27:75:7e:5f:7c:b7:44:ad:e1:72:12:
71:b4:55:ea:13:64:5e:f3:25:cd:3f:d5:c6:10:ac:
19:b3:26:6c:a1:4c:29:d6:d4:36:7d:ea:2c:46:d0:
5f:6b:3e:fb:ef:37:a1:81:b7:68:d1:f5:51:72:4f:
d7:fd:0a:3e:e1:61:cc:2d:b5:3a:de:62:e9:4a:4d:
de:49:fe:f5:73:0f:2f:d2:65:a4:8e:41:3f:d0:9d:
34:19:45:ee:90:ab:f9:c3:90:42:62:0e:ef:15:16:
70:f3:cf:87:3b:18:c6:db:03:c6:12:66:a5:88:1f:
57:c4:e7:32:94:6d:cc:4c:a0:dc:50:60:c6:15:aa:
71:4c:17:62:81:b2:09:cf:db:f7:9f:fd:d7:ca:c6:
15:3c:68:bd:aa:d1:1b:72:c1:13:19:d6:24:4e:20:
b5:cd:44:fa:15:e9:aa:7c:8e:ef:f3:ef:9b:7e:8b:
aa:ea:03:d4:66:e6:50:a7:32:bc:73:3c:a0:11:f8:
24:61:b8:37:7b:14:b8:f5:44:91:fd:2d:77:b5:34:
55:53:e1:59:3e:ee:d2:7f:61:61:c1:17:94:be:3a:
17:9e:76:fc:26:48:72:08:3f:0d:d9:09:4d:cc:d5:
25:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147292
sbgp-ipAddrBlock: critical
IPv4:
103.174.98.0/23
IPv6:
2001:df7:c480::/48
Signature Algorithm: sha256WithRSAEncryption
08:42:55:14:90:86:cc:db:29:a2:3b:69:7f:3e:92:6d:88:0c:
20:9e:67:3c:2b:74:08:40:8f:63:9f:e7:a8:0b:08:aa:27:6b:
9a:a3:ac:fa:54:d9:e0:8f:ec:0e:bf:ab:fc:72:94:8b:5e:b4:
f9:d3:f3:b3:da:76:f3:0a:0d:38:71:4b:88:fd:67:be:ce:0f:
0e:3b:18:67:9a:84:3f:94:50:0d:f8:04:3f:f8:6a:de:f8:e3:
95:28:5a:4b:5c:f2:f2:88:02:b7:5e:f3:b3:46:0e:bc:42:39:
68:80:b4:7f:23:a2:2c:e8:4d:58:3c:c1:65:ef:5e:a5:68:fa:
ec:67:26:fe:43:33:81:b6:50:94:a9:c8:95:73:f0:7e:2e:5d:
1b:0e:71:6a:9b:0b:e5:bd:c3:fe:36:ac:2d:86:92:53:71:e9:
4d:ce:e4:08:70:c1:91:f9:15:71:80:e8:7e:30:e4:b6:c8:c3:
56:5d:20:af:a8:a5:a7:b8:11:1c:68:08:f1:84:a1:26:db:e8:
14:9d:b2:ef:07:68:f1:92:a0:75:20:f9:ea:fa:ff:d8:40:29:
1b:00:20:63:ed:a3:96:62:f4:04:67:b9:c8:71:8f:22:7c:11:
f2:c3:b8:19:43:2d:43:7c:a0:d2:63:fb:8b:57:0b:be:3b:41:
6d:df:7b:0f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Oct 30 04:09:54 2026 by rpki-client