
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer
File: A8hWADTpF_SEBrQEaVALI_OVa10.cer (raw, json)
Hash identifier: J2YUsiFFn1o3CaNgDvXVe1aeMwgtD6k/ragFg9NE0qw=
Subject key identifier: 03:C8:56:00:34:E9:17:F4:84:06:B4:04:69:50:0B:23:F3:95:6B:5D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02BFEF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 27 Jun 2026 13:54:18 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 151615
IP: 103.238.154.0/23
IP: 2401:1920::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:32:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180207 (0x2bfef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 27 13:54:18 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91A98E5, serialNumber=03C8560034E917F48406B40469500B23F3956B5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:e0:07:24:6e:ed:2c:53:63:91:72:a9:fd:
bd:a1:f5:54:cc:77:6d:f3:49:6d:df:1b:15:3b:52:
ac:42:54:0b:4f:27:0a:4d:fb:f2:9c:38:9e:7c:92:
91:e5:ad:6f:00:59:a7:af:3e:85:4f:d4:41:f2:b9:
eb:07:f1:40:dc:05:db:52:72:ab:35:57:b5:44:dc:
3c:fa:ff:3f:76:80:f9:b1:68:e5:a5:03:28:c7:45:
a6:38:cb:2c:f2:00:2a:30:d9:52:c2:cb:b1:7e:4c:
6c:8a:8d:6d:0d:69:fa:ed:3e:4e:3f:e5:e0:c9:88:
9f:62:f5:b4:7e:8c:07:58:5a:f1:7b:87:50:1d:75:
76:e7:3c:71:db:a9:90:ba:2f:8e:95:76:20:e2:e2:
9e:72:ca:0b:7c:36:31:53:a3:c3:7f:57:dc:e0:c1:
5f:35:62:28:ee:1f:ea:52:17:80:3e:53:0d:f4:d2:
47:b9:b9:f0:6d:52:f7:c8:e9:18:d7:a3:e1:92:7c:
d9:ba:e2:a7:24:20:3d:f2:18:c3:cc:88:d1:86:2d:
da:55:ca:34:21:13:37:c2:8d:53:cd:73:6f:91:16:
17:5f:d0:52:6b:8d:f1:e9:42:fa:52:ef:1e:92:ef:
0a:9f:40:73:05:f7:7b:7a:6f:ca:fa:a2:da:05:84:
64:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C8:56:00:34:E9:17:F4:84:06:B4:04:69:50:0B:23:F3:95:6B:5D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151615
sbgp-ipAddrBlock: critical
IPv4:
103.238.154.0/23
IPv6:
2401:1920::/32
Signature Algorithm: sha256WithRSAEncryption
b7:79:f4:18:3a:be:ab:05:1e:90:16:1d:49:43:e2:9a:ec:24:
90:75:df:ba:93:ad:a3:76:db:27:1d:06:0b:92:9e:0d:71:dc:
bd:f3:62:c4:51:72:dc:5d:70:22:4a:c1:5a:7f:ef:61:9f:69:
80:b6:fe:54:82:16:35:4c:5c:58:c3:de:5e:fd:d3:3b:32:35:
64:7a:8f:7b:72:9a:a2:bd:39:0a:14:36:65:be:32:e4:63:6c:
28:cd:f0:26:1d:b5:8d:d0:71:c5:7a:ba:71:b1:87:28:02:bc:
19:8c:0c:5e:11:78:60:12:f6:f2:20:fe:a6:70:ab:d1:a2:23:
a3:b8:60:c8:37:e8:e3:26:4e:c0:96:01:ce:6b:71:f9:fc:21:
61:1c:3c:18:b4:0d:6e:e2:d9:04:d6:7d:b4:06:90:96:2c:50:
f0:d7:80:e2:ee:07:9b:42:5c:3b:7a:d0:0e:48:8d:05:14:ea:
96:4b:39:30:e4:7b:f3:00:a1:9a:5e:ec:aa:3e:07:e9:51:c7:
a5:9a:11:ca:9a:69:21:5f:40:82:cd:35:b8:2f:1b:fa:20:51:
98:ad:6a:19:1b:26:5d:cf:6b:09:21:44:f9:a1:ee:96:a8:71:
6b:33:79:dd:a6:c1:57:4f:62:20:ca:e9:cb:20:6e:a6:29:29:
96:8a:ba:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:14 2026 by rpki-client