Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Onr0rhzR0Kh8EYG8sPAuFIh5tr8.cer
File: Onr0rhzR0Kh8EYG8sPAuFIh5tr8.cer (raw, json)
Hash identifier: 95zHCNqpCoCynoT4OjZB+2ijLc68DKd/0OXyo8VJQCA=
Subject key identifier: 3A:7A:F4:AE:1C:D1:D0:A8:7C:11:81:BC:B0:F0:2E:14:88:79:B6:BF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C889
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/Onr0rhzR0Kh8EYG8sPAuFIh5tr8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Jul 2026 15:20:27 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 140094
IP: 103.148.109.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182409 (0x2c889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 29 15:20:27 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91FE179, serialNumber=3A7AF4AE1CD1D0A87C1181BCB0F02E148879B6BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:53:cc:60:ea:b9:d2:5f:13:fe:33:b7:47:
ff:10:04:1a:a2:2e:a9:3b:85:ef:9f:98:98:f1:70:
48:ee:e1:e3:40:f2:e0:04:f5:92:1a:e6:d3:1a:40:
78:df:89:2f:12:59:13:ab:ac:b8:49:03:a1:85:e9:
94:e5:99:33:6d:c9:17:66:b7:b8:25:e8:88:ec:1f:
b2:cd:05:2f:3f:b4:10:d1:21:8c:00:48:32:b6:ca:
99:7e:a7:3b:16:e4:fc:5f:b2:a8:be:89:03:79:dc:
a8:48:f8:d2:eb:d2:3d:60:8a:0f:cb:a8:c5:1a:b7:
d2:88:7b:a1:86:55:8f:7a:b1:09:2b:d0:f7:81:dd:
0c:c2:97:19:3e:db:44:f9:90:1a:0f:93:92:76:b5:
8b:ca:82:d7:24:33:e5:f6:75:ef:92:5e:32:0f:e2:
75:27:e7:39:22:81:61:14:30:c1:32:9a:d2:04:d6:
ac:6b:e9:4b:cd:d9:88:63:b3:54:cb:63:0f:d0:c5:
b6:26:b8:ec:be:14:c8:33:d2:33:23:04:ba:fd:0a:
bc:57:7c:da:ae:6b:86:09:30:71:26:f3:74:6c:5a:
de:b6:26:a3:92:be:9a:0e:4f:e8:04:05:52:1e:a1:
1b:3e:26:2d:dc:8a:1c:3e:ef:12:61:95:48:16:b1:
7a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7A:F4:AE:1C:D1:D0:A8:7C:11:81:BC:B0:F0:2E:14:88:79:B6:BF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/Onr0rhzR0Kh8EYG8sPAuFIh5tr8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140094
sbgp-ipAddrBlock: critical
IPv4:
103.148.109.0/24
Signature Algorithm: sha256WithRSAEncryption
da:0f:f6:de:53:14:d5:e3:9b:ed:13:c3:28:4d:77:9a:c3:a4:
e4:e5:9b:e5:24:a0:b6:d6:be:83:b3:73:c3:ff:b1:64:e3:31:
b7:d4:f5:42:ed:8e:77:71:57:7f:d7:38:3f:28:5c:ad:34:36:
34:4e:e2:66:32:8d:ae:f1:e4:d0:e4:c8:5d:24:28:7b:21:d9:
50:7f:d7:a3:14:e0:6e:78:36:7b:5c:21:a5:f5:f0:27:df:23:
86:a1:3f:5c:4f:b0:b4:2e:c7:d3:ba:b4:43:71:f9:fd:05:99:
1d:30:68:9e:30:cc:d6:5c:ed:9c:67:37:d8:82:a9:97:99:58:
31:09:0d:c6:2f:d7:fb:71:47:8a:bc:77:97:55:c2:34:d6:27:
52:39:09:20:8b:3a:87:7c:f6:88:ed:04:cf:07:e7:cc:45:61:
28:87:9d:0e:40:b3:81:4f:d1:5d:70:38:cb:34:d1:6a:76:83:
29:26:1f:94:52:bb:84:bc:de:a7:9d:26:83:09:0c:08:07:cb:
bb:64:13:97:c1:cd:0e:2c:f6:8e:27:d0:fa:f8:dc:0b:f7:14:
78:40:7f:02:20:79:03:a0:37:dc:26:71:1e:00:49:63:4d:e0:
19:42:aa:1d:d0:41:af:e8:84:10:9e:30:26:f8:09:0a:06:6e:
4b:3c:c5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:50:06 2026 by rpki-client