Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHAkGKWu3MoV2tPRHS9CZtgrpQQ.cer
File: DHAkGKWu3MoV2tPRHS9CZtgrpQQ.cer (raw, json)
Hash identifier: /+cJqe4BKCTk1XYcIkQXTSqlvyiWv+0fOPVxpmtgwgU=
Subject key identifier: 0C:70:24:18:A5:AE:DC:CA:15:DA:D3:D1:1D:2F:42:66:D8:2B:A5:04
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DE53
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918C48F/D60B1FC0C1D411F1A54BB4CB3C11F970/DHAkGKWu3MoV2tPRHS9CZtgrpQQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918C48F/D60B1FC0C1D411F1A54BB4CB3C11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 15 Oct 2026 10:25:04 +0000
Certificate not after: Thu 30 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 132851
IP: 103.74.168.0/24
IP: 103.140.32.0/24
IP: 2001:df4:fa00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 23:18:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187987 (0x2de53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 15 10:25:04 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=A918C48F, serialNumber=0C702418A5AEDCCA15DAD3D11D2F4266D82BA504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:65:00:9a:07:b8:52:49:cb:81:cf:f7:56:
db:f6:7a:7a:7a:64:87:8d:2d:d1:d6:f9:62:de:d4:
04:55:f4:82:36:83:2b:e1:d2:08:ff:6e:41:6d:76:
4a:38:d3:5c:af:63:58:1a:d7:b1:38:36:b6:d9:95:
56:56:ac:6e:13:e2:13:6f:68:3f:51:2f:fe:5f:14:
fe:2e:46:df:3c:6d:35:0b:dc:24:36:8d:2f:47:54:
c4:b3:e2:38:6b:25:da:63:a9:06:f1:8e:89:70:c1:
27:d1:25:83:dc:0d:cb:fb:99:0f:3c:dd:ba:71:f6:
3e:ba:6e:9c:9c:74:52:fb:ff:b7:bc:43:e3:f2:93:
26:79:2c:65:62:f3:45:54:4a:02:ad:c6:4b:d8:47:
53:05:86:ac:c7:70:56:da:d7:30:64:8a:ba:17:70:
6f:ee:36:57:98:2c:fd:1e:8e:a6:30:6c:d5:ae:3c:
35:32:a7:31:48:dc:3e:75:14:76:15:15:41:37:11:
ed:50:c6:6f:7b:8b:61:41:89:63:3d:97:a9:9d:94:
d4:eb:b4:65:01:ba:e8:f7:e1:2a:28:33:13:98:3d:
f1:ad:e6:20:f6:9a:8e:14:4d:9a:5d:21:e3:2f:b4:
5b:c3:64:17:2c:31:82:7d:11:ad:7b:19:f2:62:d6:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:70:24:18:A5:AE:DC:CA:15:DA:D3:D1:1D:2F:42:66:D8:2B:A5:04
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918C48F/D60B1FC0C1D411F1A54BB4CB3C11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918C48F/D60B1FC0C1D411F1A54BB4CB3C11F970/DHAkGKWu3MoV2tPRHS9CZtgrpQQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132851
sbgp-ipAddrBlock: critical
IPv4:
103.74.168.0/24
103.140.32.0/24
IPv6:
2001:df4:fa00::/48
Signature Algorithm: sha256WithRSAEncryption
6d:4c:6d:13:e7:9e:ae:93:8f:c3:c5:fe:2c:3d:6a:2d:11:77:
a9:d6:4e:58:26:85:a0:c4:5b:da:c6:5b:b3:1d:57:a1:88:86:
fd:20:6f:da:c9:57:9c:51:a2:38:1e:51:52:ba:c3:55:10:b3:
a8:ef:7e:52:1a:63:2b:54:c4:a7:17:8b:22:eb:00:3d:a8:39:
04:2c:2f:f6:3b:cc:52:89:da:f5:51:23:cd:8e:76:e2:49:9a:
6d:e7:80:e9:d0:f3:fc:6b:24:9a:51:43:60:32:d5:70:61:37:
2c:9c:da:da:c8:4a:b0:06:fc:7d:bc:87:8c:fc:cc:7c:18:ae:
51:d2:87:82:7e:33:b7:2a:d2:45:63:0a:2c:bb:3e:07:ab:60:
f4:6d:20:91:ad:9e:f9:30:55:3a:c0:91:3f:ab:ad:ae:70:92:
e5:13:dd:de:5f:31:a0:13:bc:3c:0a:3c:70:61:dc:82:b8:0e:
4f:b8:5d:c3:c2:80:19:38:ef:75:38:a3:c2:2d:6a:27:7f:b4:
56:32:90:44:69:2d:74:27:15:62:f8:df:90:f5:17:33:18:19:
bb:1c:e0:0b:36:72:51:a7:54:92:26:e2:99:f8:60:68:76:14:
ba:f4:ad:45:93:f0:ed:e7:b6:62:ed:cc:7b:71:df:cf:ef:62:
fa:8a:9c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:35 2026 by rpki-client