Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer
File: H1rFBrARMMguXkcxYDuiZM7YSGY.cer (raw, json)
Hash identifier: +YkmEtYgStGvGDTQiFq88I5HmVT9tWqnzR53yiEYiq0=
Subject key identifier: 1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02AA41
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 04 Apr 2026 14:13:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 142062
IP: 103.166.86.0/23
IP: 2001:df6:8380::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174657 (0x2aa41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 4 14:13:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A91CBB22, serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f5:5a:7f:e2:46:09:2e:4f:22:dc:c5:f4:5d:
df:62:6b:45:94:0a:32:fa:02:5e:ed:20:23:87:72:
3a:1d:d1:d0:01:b4:73:9c:a7:4f:6c:f2:35:b6:a4:
d6:c0:77:90:87:32:29:d1:f1:49:e2:24:97:5e:0e:
f0:d4:ab:d6:85:9d:71:fa:eb:4f:48:8a:f8:a0:14:
7e:54:ac:45:5c:dc:7b:4c:4a:47:28:37:27:f7:d0:
ef:46:89:3a:2a:5a:8e:62:83:f3:61:b9:2e:4f:95:
49:38:ea:6d:71:8e:19:c8:c4:23:08:21:c6:de:2b:
62:8b:3b:59:32:18:56:04:bb:3a:17:d0:2e:e4:48:
27:fb:0d:9d:c2:21:5a:33:0e:03:e7:9d:dd:98:fc:
e2:a9:13:9b:61:e9:71:91:45:db:1f:0c:22:0f:bf:
cf:d3:51:7e:a3:a8:38:c8:a2:37:46:26:f9:bc:8c:
0c:f3:57:35:b7:cf:30:d0:27:b2:12:2e:3e:10:ff:
a6:1b:e6:47:fe:42:ab:a1:d0:77:bb:6a:a9:1c:ba:
94:20:da:95:9a:21:99:37:5f:d5:e6:a6:51:bf:79:
8d:4d:de:ef:c0:af:9d:05:6d:9c:f8:43:fc:03:4a:
40:6f:f3:39:22:b8:17:57:22:a0:1c:e5:57:c8:b4:
4b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142062
sbgp-ipAddrBlock: critical
IPv4:
103.166.86.0/23
IPv6:
2001:df6:8380::/48
Signature Algorithm: sha256WithRSAEncryption
aa:27:3e:02:56:8f:4f:9e:9d:f6:c3:77:47:95:9a:00:5b:c4:
17:df:95:28:8e:c1:9b:b3:cc:bc:aa:21:5e:76:ee:20:0e:aa:
f0:59:90:13:5b:ed:49:05:8a:7b:61:3f:b0:3c:68:19:ed:a7:
3e:5d:64:f5:2e:e2:a4:e8:0b:34:aa:9f:5a:11:8b:e6:e7:9f:
13:ea:cf:bf:0c:2c:39:6d:76:03:e4:9c:2e:4d:6a:9a:7d:d9:
e5:ba:6c:3a:bc:5b:31:87:fa:2d:3a:4c:6b:22:45:a7:ea:25:
68:b0:66:12:60:9d:50:a6:cc:63:8b:fa:84:e9:a3:d8:ca:43:
1e:c2:ba:20:87:88:21:93:ed:d3:93:18:42:c4:20:46:50:3c:
57:fe:76:ce:46:01:f2:e4:78:53:34:60:58:05:35:24:ae:07:
d8:70:7f:ea:58:b8:17:ce:57:56:ca:0e:70:66:af:ed:0d:7d:
b6:f8:dc:63:b5:65:c4:aa:e2:4f:f3:b6:a5:67:8f:cb:4f:ab:
3a:24:e0:f2:a4:e1:a8:10:81:21:84:da:5e:30:9e:66:d4:b8:
c7:9b:4c:93:f6:3b:28:86:19:e8:05:ff:d7:5b:cb:0c:31:7f:
a9:6a:f8:2d:52:39:92:c2:73:2f:b8:a8:c2:7e:8a:e4:9c:9f:
11:bb:1e:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 6 07:12:08 2026 by rpki-client