Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
File: Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer (raw, json)
Hash identifier: ykm6zd3oCmW12+RrKHtYSAAolAelraX1ylzWzXMYM4U=
Subject key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C8FC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 31 Jul 2026 04:47:49 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: AS: 142297
IP: 103.167.186.0/23
IP: 2001:df6:bb80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Aug 2026 06:05:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182524 (0x2c8fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 31 04:47:49 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A911112F, serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:c4:60:18:61:cd:c4:6f:8a:59:61:12:92:
c5:a0:bc:73:a3:33:5c:0b:0a:5c:13:f3:6b:28:43:
3e:bc:56:02:79:97:22:b5:ed:a7:8d:1e:80:18:59:
fc:00:56:34:8f:e0:3a:d0:65:b2:19:04:67:f6:10:
f8:51:c7:74:8a:91:e0:a3:e6:06:ba:03:e3:ad:36:
cc:89:8d:dd:6b:fe:40:c7:a1:87:c3:23:43:7a:e3:
07:b6:67:e8:93:ad:16:1c:07:69:af:c7:6f:b1:ec:
11:21:69:bb:02:13:94:09:5a:a4:21:26:91:4f:8a:
31:8f:e7:7a:c7:b3:26:8b:d7:a7:4e:97:db:4b:2f:
4f:8c:cf:98:28:0a:3a:c5:5d:e1:f9:5f:45:b6:ba:
30:82:08:86:e7:21:a0:4a:d0:83:03:7d:e1:3b:c4:
c1:d1:87:9e:33:e3:59:24:4d:1f:5a:5f:0d:d0:13:
7b:ef:0f:e9:32:c8:ac:f5:12:2b:e7:0e:d5:03:b2:
a8:87:2d:dc:cc:81:fd:ce:5c:37:35:9e:0e:35:c8:
fe:16:11:b0:f3:22:22:78:70:98:a7:ab:1b:46:e8:
9c:a0:32:25:44:72:6b:2b:26:4a:7e:ae:c0:8c:c7:
60:6a:fd:45:ae:95:d4:b7:8d:ed:66:47:10:b6:eb:
93:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142297
sbgp-ipAddrBlock: critical
IPv4:
103.167.186.0/23
IPv6:
2001:df6:bb80::/48
Signature Algorithm: sha256WithRSAEncryption
4c:1c:2c:c0:bc:c6:cb:34:6e:72:a5:4e:26:7c:00:36:ee:f0:
3b:3a:57:50:d2:69:74:8d:50:a5:d5:0c:e7:06:89:84:62:35:
2e:9b:e5:74:c4:5b:40:b0:07:61:3f:a9:ff:97:ba:6b:ad:9c:
f5:2e:59:b8:82:76:54:2f:f9:05:32:ee:0a:db:e7:cc:07:ba:
ce:01:56:c5:55:35:8b:a2:b7:c4:47:54:4f:1f:95:bd:69:ba:
26:30:a5:25:7f:9e:be:8a:3c:a8:b9:0f:c7:c7:7f:7d:1a:51:
e7:13:18:0c:97:0d:3e:8c:82:55:af:58:89:48:3e:e3:09:66:
52:93:ee:7b:31:ed:bb:b7:73:85:79:f0:f0:66:8c:3e:55:55:
73:a6:97:0a:e6:c3:16:1a:42:40:bd:ae:9e:ec:84:9d:f4:e0:
56:1e:e2:79:c8:44:b5:95:8b:b0:94:4b:c4:0c:c7:fc:d7:72:
f1:a7:d0:2d:a9:63:1b:61:21:61:32:28:97:bf:e1:70:80:d1:
78:73:bb:43:5a:2d:3f:7b:5c:a5:1d:84:23:5a:f9:f6:91:0f:
6b:00:0c:b7:70:ff:a3:4c:27:38:7c:07:3b:df:cd:d1:4f:de:
f5:ed:55:cf:16:bb:3b:37:50:76:ed:62:ef:6e:e2:ab:da:0d:
01:9d:93:ba
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAsj8MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDczMTA0NDc0OVoXDTI3MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMTExMkYxMTAvBgNVBAUTKDFFNTdCNDNGMDQ0RDRBQkE4MjIyQTQw
OTc4NjYxNDI4MEFBNzM5QTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+zcRgGGHNxG+KWWESksWgvHOjM1wLClwT82soQz68VgJ5lyK17aeNHoAYWfwA
VjSP4DrQZbIZBGf2EPhRx3SKkeCj5ga6A+OtNsyJjd1r/kDHoYfDI0N64we2Z+iT
rRYcB2mvx2+x7BEhabsCE5QJWqQhJpFPijGP53rHsyaL16dOl9tLL0+Mz5goCjrF
XeH5X0W2ujCCCIbnIaBK0IMDfeE7xMHRh54z41kkTR9aXw3QE3vvD+kyyKz1Eivn
DtUDsqiHLdzMgf3OXDc1ng41yP4WEbDzIiJ4cJinqxtG6JygMiVEcmsrJkp+rsCM
x2Bq/UWuldS3je1mRxC265NZAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUHle0PwRN
SrqCIqQJeGYUKAqnOaEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTExMTJGLzk2NERDNjlBQkE4RDExRUU4MjhBODk0NkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTExMTEyRi85NjREQzY5QUJBOEQxMUVFODI4QTg5NDZDNEY5QUUwMi9IbGUwUHdS
TlNycUNJcVFKZUdZVUtBcW5PYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAivZMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ6e6MA8EAgAC
MAkDBwAgAQ32u4AwDQYJKoZIhvcNAQELBQADggEBAEwcLMC8xss0bnKlTiZ8ADbu
8Ds6V1DSaXSNUKXVDOcGiYRiNS6b5XTEW0CwB2E/qf+XumutnPUuWbiCdlQv+QUy
7grb58wHus4BVsVVNYuit8RHVE8flb1puiYwpSV/nr6KPKi5D8fHf30aUecTGAyX
DT6MglWvWIlIPuMJZlKT7nsx7bu3c4V58PBmjD5VVXOmlwrmwxYaQkC9rp7shJ30
4FYe4nnIRLWVi7CUS8QMx/zXcvGn0C2pYxthIWEyKJe/4XCA0Xhzu0NaLT97XKUd
hCNa+faRD2sADLdw/6NMJzh8BzvfzdFP3vXtVc8Wuzs3UHbtYu9u4qvaDQGdk7o=
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:50:06 2026 by rpki-client