Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
File: HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer (raw, json)
Hash identifier: WiwrMYE5KE/Alkjc1SZbM4MubIjVEswtjAE7R5TfsQA=
Subject key identifier: 1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C10C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 30 Jun 2026 15:16:19 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 132304
IP: 103.99.23.0/24
IP: 103.108.2.0/23
IP: 103.108.8.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 19:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180492 (0x2c10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 30 15:16:19 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A91F3805, serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2b:58:83:73:5c:66:e4:56:b9:b8:d2:74:6f:
54:49:13:7d:af:17:1d:3e:f7:a4:30:0d:f5:77:da:
45:45:79:07:ae:db:4b:32:eb:01:f2:0c:b1:cf:15:
a5:4f:d4:00:e9:03:05:57:9e:b5:05:ba:c7:05:ce:
f0:55:bb:34:d0:8d:f5:69:c6:9a:e3:e2:aa:ca:b5:
cc:c9:6a:2e:d9:28:17:55:20:e8:10:2c:7a:0c:93:
ca:c6:37:6d:0a:73:cc:86:f3:d6:f2:6d:a6:31:e5:
f9:34:26:7a:22:4a:dc:81:81:e1:5f:26:ca:5b:f1:
d3:b2:20:ca:99:43:ee:63:a4:2c:cb:6c:47:8a:3b:
e9:a7:60:99:73:de:73:ca:b7:48:cf:1e:5f:1a:a5:
a3:57:4f:e5:7b:7c:cf:6c:c3:d6:e0:9a:ba:bf:1c:
65:ba:ce:ed:27:40:53:a4:17:b2:9e:55:c1:5b:c8:
12:85:6f:6a:0a:82:9d:9c:91:52:85:ff:f4:22:7c:
34:f2:49:af:4f:57:9c:bc:12:81:14:8a:a7:03:90:
8e:86:c6:46:f7:fc:28:c7:4a:21:6e:31:20:ee:87:
37:94:4f:f3:5d:37:dc:27:2c:c3:7b:6b:98:bf:a8:
b7:e9:36:b1:0a:4d:14:69:75:75:35:74:b0:2c:a1:
67:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132304
sbgp-ipAddrBlock: critical
IPv4:
103.99.23.0/24
103.108.2.0/23
103.108.8.0/24
Signature Algorithm: sha256WithRSAEncryption
80:7f:84:19:d1:4e:91:0f:1c:e2:94:1d:43:a0:92:49:b4:0a:
bc:c0:26:1e:5a:01:5c:94:0b:50:22:58:72:db:21:10:30:ff:
b9:81:cd:f7:ad:f7:29:df:88:5d:46:73:6d:7e:c5:a8:88:60:
74:dc:99:6c:a7:f8:9e:f5:a1:98:2f:83:0e:e9:76:92:0b:a3:
fb:d1:ac:b0:36:68:55:bd:50:57:93:3d:09:04:57:dc:00:e3:
70:da:71:4a:82:c3:3b:54:ec:3b:00:e1:af:ba:6f:43:5e:a7:
c1:85:74:7d:54:13:a7:0a:7d:00:ed:99:07:a8:ef:88:9c:e7:
55:b6:de:5d:1d:ff:6c:b7:d9:9c:53:28:1b:4c:b1:21:4c:22:
9e:1d:c7:2d:ba:c3:61:5d:fe:5f:73:c5:fe:12:61:8b:8b:68:
98:ee:1c:ce:2c:1e:8f:6d:8a:6e:ac:25:3f:b9:35:a1:58:93:
b5:93:fe:4c:20:94:26:e0:7e:75:b6:dd:19:b4:c2:8b:c5:16:
12:71:a7:a5:8d:36:63:9c:d1:9b:69:d4:54:d0:4b:3f:1f:04:
93:83:1c:1b:4e:ee:46:bd:1d:c7:21:9c:69:dd:f4:75:99:95:
72:32:56:42:f3:b2:87:5b:07:87:3a:50:51:03:e4:9c:4e:19:
49:01:da:bd
-----BEGIN CERTIFICATE-----
MIIGJjCCBQ6gAwIBAgIDAsEMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDYzMDE1MTYxOVoXDTI3MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjM4MDUxMTAvBgNVBAUTKDFFNTMwRkE5RjY2MEE4REMxNzM4QzdB
QTBDOEFGQzc3RjRGMEJCQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDgK1iDc1xm5Fa5uNJ0b1RJE32vFx0+96QwDfV32kVFeQeu20sy6wHyDLHPFaVP
1ADpAwVXnrUFuscFzvBVuzTQjfVpxprj4qrKtczJai7ZKBdVIOgQLHoMk8rGN20K
c8yG89bybaYx5fk0JnoiStyBgeFfJspb8dOyIMqZQ+5jpCzLbEeKO+mnYJlz3nPK
t0jPHl8apaNXT+V7fM9sw9bgmrq/HGW6zu0nQFOkF7KeVcFbyBKFb2oKgp2ckVKF
//QifDTySa9PV5y8EoEUiqcDkI6Gxkb3/CjHSiFuMSDuhzeUT/NdN9wnLMN7a5i/
qLfpNrEKTRRpdXU1dLAsoWf1AgMBAAGjggMbMIIDFzAdBgNVHQ4EFgQUHlMPqfZg
qNwXOMeqDIr8d/Twu7MwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUYzODA1LzQwMEM1REVDRDAxMDExRjA5RjBERDgxQ0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGMzgwNS80MDBDNURFQ0QwMTAxMUYwOUYwREQ4MUNDNEY5QUUwMi9IbE1QcWZa
Z3FOd1hPTWVxRElyOGRfVHd1N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgTQMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAZ2MXAwQBZ2wC
AwQAZ2wIMA0GCSqGSIb3DQEBCwUAA4IBAQCAf4QZ0U6RDxzilB1DoJJJtAq8wCYe
WgFclAtQIlhy2yEQMP+5gc33rfcp34hdRnNtfsWoiGB03Jlsp/ie9aGYL4MO6XaS
C6P70aywNmhVvVBXkz0JBFfcAONw2nFKgsM7VOw7AOGvum9DXqfBhXR9VBOnCn0A
7ZkHqO+InOdVtt5dHf9st9mcUygbTLEhTCKeHcctusNhXf5fc8X+EmGLi2iY7hzO
LB6PbYpurCU/uTWhWJO1k/5MIJQm4H51tt0ZtMKLxRYScaeljTZjnNGbadRU0Es/
HwSTgxwbTu5GvR3HIZxp3fR1mZVyMlZC87KHWweHOlBRA+ScThlJAdq9
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:24:27 2026 by rpki-client