Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer
File: enhVXghERXV_vNAN3R10w2nLoLA.cer (raw, json)
Hash identifier: IZ2ZolkMM0iBB52vGuU1XZnR2/tixY19gX7ZaClxctk=
Subject key identifier: 7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B5C0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 20 May 2026 10:47:38 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 141459
IP: 103.160.22.0/23
IP: 2406:e1c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177600 (0x2b5c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 20 10:47:38 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A914E6AA, serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:bf:cc:4f:64:42:84:49:6c:80:9c:af:ce:
bc:c6:e5:bb:7f:ea:d8:ad:c3:92:72:00:6c:84:25:
25:89:da:d3:25:a0:ed:3e:7b:87:ab:76:b0:c2:02:
29:ec:5c:71:54:aa:8c:19:20:d1:fa:26:26:64:7a:
f3:03:a9:8d:28:57:20:d2:d3:51:14:35:c8:58:47:
95:e1:d8:3a:15:af:61:ac:69:e9:d9:8f:6d:a0:87:
dc:77:ef:20:2e:03:af:43:be:b6:18:f8:f7:b1:e9:
83:04:87:30:8b:2d:85:ef:c1:69:c3:49:36:57:9c:
14:41:24:d7:7b:3d:b2:c4:fd:58:65:c7:31:67:25:
c9:21:df:55:bf:34:c2:fe:f1:1e:be:cd:55:07:a2:
f7:1c:76:2a:dc:27:69:d1:a2:ee:c1:9c:ad:bd:f4:
3a:cb:1f:bc:aa:ea:65:0e:06:21:5f:ad:cb:b1:49:
bf:19:20:23:2b:98:91:9e:3d:86:a2:fa:07:c9:71:
05:00:05:16:d1:5c:da:a7:2a:d9:f9:34:ee:dc:1c:
c5:e6:bf:e6:35:6d:09:fb:8b:36:02:d5:73:c3:d3:
9e:4a:f2:83:b6:ae:07:48:bf:1b:dc:2e:cb:f9:ae:
bd:8f:3b:9e:b1:c5:7e:f7:51:12:33:d1:9a:35:29:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141459
sbgp-ipAddrBlock: critical
IPv4:
103.160.22.0/23
IPv6:
2406:e1c0::/32
Signature Algorithm: sha256WithRSAEncryption
9f:3e:b6:a7:99:fb:b5:48:52:f8:1b:5d:ff:03:c1:b8:60:55:
16:b0:84:44:79:10:30:b0:4d:81:b4:9d:5f:33:58:e0:42:a8:
d5:c0:8e:7f:a1:d6:43:21:46:8b:48:61:07:de:c6:bf:45:bd:
1c:a4:64:e8:24:a3:7d:af:05:e6:22:4f:57:34:58:95:ae:ce:
47:a6:13:58:b9:4b:47:ac:cf:6d:39:10:2f:c8:f5:b4:c2:b1:
d5:17:32:2b:6b:47:95:dc:4e:33:0c:3e:47:1d:d4:2d:ba:6a:
a2:51:12:f6:6d:72:cc:31:27:78:8a:52:91:8c:56:b6:1a:c3:
5b:84:94:0a:06:ef:ba:64:aa:b2:26:46:21:25:a6:33:9f:ba:
92:4e:e9:90:72:06:c5:cf:34:64:19:a2:28:f6:0b:5f:68:53:
ab:f2:20:ae:0c:18:52:56:95:03:54:d6:88:e3:65:bb:ff:fc:
1c:e9:58:2c:a7:c6:15:0d:1a:e2:92:10:6e:22:eb:a7:2f:f5:
75:05:fe:5b:b3:6e:9b:02:ef:31:d2:20:67:ad:3e:9a:06:1f:
13:8d:90:01:ee:c0:e8:0e:e5:4c:97:79:1a:f8:a2:66:0a:6c:
da:9c:86:91:37:45:82:94:7b:b8:84:a7:48:a9:73:f0:e9:0a:
ee:c4:ac:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 08:43:31 2026 by rpki-client