Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
File: cPhdBJUBOFatAizAkilp4Mj8ReI.cer (raw, json)
Hash identifier: 8rgGV3Qn3z/wfiJ2cPKjas+9Nn97BnGEooNyhEUYqrA=
Subject key identifier: 70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B5FD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 20 May 2026 22:45:38 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 137441
IP: 103.166.60.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177661 (0x2b5fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 20 22:45:38 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A9184F2D, serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:6a:fa:81:d0:bc:14:b5:90:b1:19:cf:ea:
d7:d5:2f:9c:f6:af:4a:fa:42:31:eb:8d:dd:42:df:
67:6d:bf:db:e2:58:a9:d5:3b:37:28:28:92:a1:55:
51:60:df:6b:6c:0a:dd:e8:19:aa:31:3e:92:cf:01:
65:07:f7:10:90:b1:1f:0a:18:b6:fc:87:df:2a:60:
98:74:6f:ce:b6:07:9f:b2:79:66:d0:84:32:6a:a3:
1c:7b:6f:78:f5:6e:35:8f:6b:61:a4:a6:38:cd:0e:
7a:63:8a:5e:b7:29:c4:75:62:e4:3b:ed:4b:42:61:
3b:65:0a:4d:1e:22:c2:7f:35:6b:7d:72:22:b0:f3:
99:29:2c:f7:7d:a2:1b:7f:e7:7d:5f:0a:b9:64:5a:
99:a9:34:01:bb:86:9b:a8:cd:ef:79:6b:4e:6c:8f:
9a:7c:97:69:a2:2f:cb:d1:c8:a5:ed:98:ca:9f:7f:
2a:bb:ee:7b:17:8e:88:a5:7f:72:60:d0:cc:dd:8c:
1c:30:62:3b:9e:d2:ef:20:04:96:8a:1a:63:9f:58:
b1:25:e9:87:cc:7d:e0:80:42:db:40:8a:7b:03:c1:
c1:7d:ef:1a:68:4c:1a:4b:d6:45:43:f6:ca:90:45:
69:07:e6:ad:ba:c5:34:6f:6c:6a:8f:0c:2c:a8:db:
d7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137441
sbgp-ipAddrBlock: critical
IPv4:
103.166.60.0/23
Signature Algorithm: sha256WithRSAEncryption
08:59:64:86:6c:17:b8:00:bc:2d:d5:ea:6e:07:e8:3f:e7:5d:
67:97:85:65:eb:66:b7:d7:20:43:ea:af:59:60:58:6d:69:eb:
cb:bc:56:25:9b:61:9f:8c:7f:c7:46:d8:b9:63:54:d1:32:16:
b2:aa:e5:d4:49:92:ec:ed:98:f3:29:c3:7a:ef:62:86:a4:64:
bb:ca:5d:55:4e:e7:40:c3:5f:79:71:fc:a7:f5:15:f6:f1:41:
00:b9:7d:95:57:43:46:6a:a2:b1:50:a7:38:79:4e:28:33:bf:
d1:19:d1:bb:c8:a4:f8:25:a4:d6:5d:bc:49:f7:78:4a:ad:33:
9f:21:19:0f:9b:ea:b3:91:46:69:86:0a:0f:31:b7:27:1a:36:
76:f3:9f:a4:3a:6d:f0:2c:1a:4c:88:95:c2:d4:7d:40:99:db:
b0:71:ec:1b:f6:4b:a6:b8:7a:43:f5:fe:03:52:a6:83:17:ac:
d7:2f:95:87:48:c1:c1:d0:3e:07:fd:2c:88:d6:85:5f:6f:96:
20:a7:a4:dd:24:c2:62:72:1f:fc:f5:8e:40:3f:fb:cf:fb:20:
2d:84:92:cd:82:c9:7c:b7:50:ab:a6:3e:0b:56:c7:22:21:df:
25:cb:ec:e5:5a:90:ad:0b:43:4f:a3:43:3f:67:ab:f3:fb:2b:
35:49:37:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:29:14 2026 by rpki-client