Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer
File: 444NefP9KSMew_PjAp05P0MnfLM.cer (raw, json)
Hash identifier: nvOVVmfiFIpDC0jkVq8XzYWX4k1w7/YX8n2iKKQsCiM=
Subject key identifier: E3:8E:0D:79:F3:FD:29:23:1E:C3:F3:E3:02:9D:39:3F:43:27:7C:B3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D75A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 21 Sep 2026 12:32:20 +0000
Certificate not after: Tue 30 Sep 2031 00:00:00 +0000
Subordinate resources: AS: 140971
IP: 103.154.14.0/23
IP: 2001:df4:6480::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186202 (0x2d75a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 21 12:32:20 2026 GMT
Not After : Sep 30 00:00:00 2031 GMT
Subject: CN=A9128298, serialNumber=E38E0D79F3FD29231EC3F3E3029D393F43277CB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:d1:58:e8:eb:11:9c:b3:7b:24:8c:d1:0f:
d2:14:3c:50:68:48:ed:66:15:dd:45:e9:24:61:7b:
13:83:84:a8:c2:74:bb:05:37:98:2e:2b:09:f5:19:
62:68:35:18:00:2d:36:a8:79:0b:30:1c:08:40:ea:
3b:ba:bf:a8:43:d6:7c:e3:89:11:5b:12:7d:f3:ba:
94:92:7f:68:c3:45:fb:6b:6e:ca:f9:8d:0c:22:9b:
fd:42:cc:52:a8:3d:07:86:c1:69:fe:4d:bc:75:3a:
57:b3:5c:99:37:2d:3a:f9:e5:3d:69:cc:c7:66:53:
e7:2f:29:7c:3b:90:73:35:f0:2f:78:40:b8:92:42:
e6:f6:38:19:49:c1:b6:bd:e4:bd:a1:16:7b:e1:4e:
58:12:85:a8:0b:7f:6a:31:23:7a:64:ac:e7:28:54:
ea:51:70:b4:3a:6f:5f:38:cd:61:f9:dd:65:78:cf:
a8:1b:9e:08:cf:2b:d4:d3:2b:fa:83:b5:2b:cf:01:
12:e8:53:df:0e:45:66:a8:41:73:0c:08:f6:3e:04:
62:ac:53:25:f3:33:66:09:85:8f:94:de:24:5a:cc:
85:46:9f:94:51:f0:13:ac:fc:b7:3b:4b:e0:54:f7:
25:f0:51:20:68:2d:6f:5e:6f:2e:e6:27:43:a8:69:
a1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8E:0D:79:F3:FD:29:23:1E:C3:F3:E3:02:9D:39:3F:43:27:7C:B3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140971
sbgp-ipAddrBlock: critical
IPv4:
103.154.14.0/23
IPv6:
2001:df4:6480::/48
Signature Algorithm: sha256WithRSAEncryption
8b:cc:75:4b:0d:70:7e:fe:74:e0:c5:cd:dd:38:34:fe:e1:5e:
e5:47:7f:81:63:ed:a8:f7:29:b8:c6:0e:45:e6:22:e8:ab:6e:
48:3b:fa:6a:d9:b6:35:34:98:b5:7f:fa:f1:d5:6f:20:67:fc:
33:92:7e:b1:78:a7:ed:7f:00:c4:db:74:c7:2d:23:75:f7:a5:
43:a8:56:11:12:da:92:af:0d:80:9d:c2:ce:ba:b4:1a:71:0c:
2d:6e:1a:34:85:7d:84:53:21:20:a5:96:52:a8:fd:c4:13:ae:
d0:67:41:17:fa:3f:89:8b:59:7e:8c:d1:d8:a8:a1:08:b1:c2:
b9:89:82:cd:ad:fc:dc:6f:7b:79:ba:72:6c:37:ea:43:ad:d5:
5f:fb:9f:05:94:20:67:22:da:04:53:7f:64:d0:f7:01:36:c1:
18:78:44:10:d3:c8:e6:b8:31:9b:f7:39:96:3f:c6:08:6a:52:
43:c3:29:fa:a2:68:4e:de:31:32:c7:d2:4f:f3:23:96:fa:6a:
0f:38:d1:b6:33:26:44:9e:22:6c:ef:c1:1a:6d:f9:4e:6f:88:
1c:c0:99:18:17:78:e7:5a:de:9d:48:63:2a:a1:ad:be:23:26:
d1:bf:bc:15:63:28:71:23:b6:fc:fb:8b:08:6d:2d:ec:82:95:
9b:16:16:ff
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAtdaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDkyMTEyMzIyMFoXDTMxMDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMjgyOTgxMTAvBgNVBAUTKEUzOEUwRDc5RjNGRDI5MjMxRUMzRjNF
MzAyOUQzOTNGNDMyNzdDQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHutFY6OsRnLN7JIzRD9IUPFBoSO1mFd1F6SRhexODhKjCdLsFN5guKwn1GWJo
NRgALTaoeQswHAhA6ju6v6hD1nzjiRFbEn3zupSSf2jDRftrbsr5jQwim/1CzFKo
PQeGwWn+Tbx1OlezXJk3LTr55T1pzMdmU+cvKXw7kHM18C94QLiSQub2OBlJwba9
5L2hFnvhTlgShagLf2oxI3pkrOcoVOpRcLQ6b184zWH53WV4z6gbngjPK9TTK/qD
tSvPARLoU98ORWaoQXMMCPY+BGKsUyXzM2YJhY+U3iRazIVGn5RR8BOs/Lc7S+BU
9yXwUSBoLW9eby7mJ0OoaaErAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU444NefP9
KSMew/PjAp05P0MnfLMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTI4Mjk4LzcyMjQ3NjZBQjIwQzExRUJBQzg4NkEyQ0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEyODI5OC83MjI0NzY2QUIyMEMxMUVCQUM4ODZBMkNDNEY5QUUwMi80NDROZWZQ
OUtTTWV3X1BqQXAwNVAwTW5mTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiarMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ5oOMA8EAgAC
MAkDBwAgAQ30ZIAwDQYJKoZIhvcNAQELBQADggEBAIvMdUsNcH7+dODFzd04NP7h
XuVHf4Fj7aj3KbjGDkXmIuirbkg7+mrZtjU0mLV/+vHVbyBn/DOSfrF4p+1/AMTb
dMctI3X3pUOoVhES2pKvDYCdws66tBpxDC1uGjSFfYRTISClllKo/cQTrtBnQRf6
P4mLWX6M0diooQixwrmJgs2t/Nxve3m6cmw36kOt1V/7nwWUIGci2gRTf2TQ9wE2
wRh4RBDTyOa4MZv3OZY/xghqUkPDKfqiaE7eMTLH0k/zI5b6ag840bYzJkSeImzv
wRpt+U5viBzAmRgXeOda3p1IYyqhrb4jJtG/vBVjKHEjtvz7iwhtLeyClZsWFv8=
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:58:43 2026 by rpki-client