Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FN3HrsvJJccEVg46_IW8PE9PzCg.cer
File: FN3HrsvJJccEVg46_IW8PE9PzCg.cer (raw, json)
Hash identifier: g2ZlRcqLjuO1Qz6J8KMBHYboXj/X8zh0eMXXgRgOdTQ=
Subject key identifier: 14:DD:C7:AE:CB:C9:25:C7:04:56:0E:3A:FC:85:BC:3C:4F:4F:CC:28
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B75B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E1841/4D3F4612599711F18B504558B3833773/FN3HrsvJJccEVg46_IW8PE9PzCg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E1841/4D3F4612599711F18B504558B3833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 27 May 2026 06:43:04 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 150449
IP: 103.42.222.0/23
IP: 2001:df1:9740::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:35:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178011 (0x2b75b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 27 06:43:04 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91E1841, serialNumber=14DDC7AECBC925C704560E3AFC85BC3C4F4FCC28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6c:dc:0e:88:87:bc:0e:37:f2:e9:c1:44:4b:
db:a3:ef:e4:a9:d9:9a:3e:e2:8a:30:fa:14:16:7c:
ed:c4:95:bf:31:d3:9d:6c:2c:df:a1:11:10:2f:7e:
58:c4:f9:e7:2f:d7:0f:d3:7b:2a:df:d0:6d:4a:c8:
0e:c4:62:1a:9c:b4:cb:f4:1e:e7:24:6f:9a:b3:2a:
ad:fd:4e:af:a9:4e:99:1d:83:e8:7f:64:f9:5a:ce:
be:30:f8:a4:6f:b5:cb:4e:7a:55:9c:2f:1a:3a:dd:
34:e0:3c:63:4f:51:40:02:f0:65:0e:8b:03:a0:f3:
65:cf:b5:8f:1a:03:98:c0:29:6b:5e:c5:0c:63:13:
af:2f:6b:fe:de:59:bb:34:6b:9f:bf:78:94:f7:d4:
3c:93:13:99:b4:35:79:63:45:4b:1f:03:22:bb:02:
33:5d:78:02:d1:a0:67:2c:e7:06:f9:c2:58:2b:1f:
75:b1:05:86:80:dc:e4:a0:82:61:da:51:ac:92:34:
9c:1d:22:61:ab:73:19:d0:d3:fe:5b:0f:5f:c6:bf:
db:9a:38:4b:25:6f:fd:3f:dd:bf:e4:77:01:5b:65:
9b:1f:c5:28:b0:50:ad:9d:c6:ea:7a:4a:24:38:30:
c7:b1:45:33:b5:0d:a2:6d:cf:c0:7c:90:af:c9:18:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DD:C7:AE:CB:C9:25:C7:04:56:0E:3A:FC:85:BC:3C:4F:4F:CC:28
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E1841/4D3F4612599711F18B504558B3833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E1841/4D3F4612599711F18B504558B3833773/FN3HrsvJJccEVg46_IW8PE9PzCg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150449
sbgp-ipAddrBlock: critical
IPv4:
103.42.222.0/23
IPv6:
2001:df1:9740::/48
Signature Algorithm: sha256WithRSAEncryption
15:0d:cf:2b:d7:65:64:c3:77:e8:33:be:8f:fd:b5:08:9d:e5:
72:89:6e:72:9d:d9:d1:7a:b1:b7:ea:da:e1:43:f3:6e:d2:6e:
c6:71:c4:f6:d8:53:99:df:72:f8:2f:38:4a:09:bc:cf:86:7b:
bc:7d:f1:3f:fa:19:7d:df:60:c5:28:42:5d:97:15:49:c4:93:
be:9f:b4:ce:9e:9b:b3:cc:a4:40:4f:57:b0:d2:03:fe:4c:fd:
8b:bd:a8:97:ca:f1:23:10:9e:19:01:09:c7:94:45:19:01:cb:
25:ea:20:ea:18:e9:9f:db:2a:46:24:87:18:cb:f9:d8:84:e4:
4b:5f:1e:86:d9:84:f3:7b:e4:9b:6f:b9:a1:e8:57:34:f7:75:
aa:d2:46:e7:a6:10:7f:fe:d4:b8:ea:ca:7b:f0:f4:a0:40:61:
e9:2d:50:32:3e:f6:c0:df:73:8a:bb:6d:83:f5:7b:90:f9:d3:
df:04:de:35:57:68:c2:d1:6b:70:f0:92:8f:b1:9d:a0:a5:d6:
ca:e6:8d:bc:e6:0f:45:a8:78:ef:b6:9a:43:62:af:61:12:ce:
c3:23:e4:78:a0:da:80:de:e8:b2:72:30:e1:d2:d4:cf:76:1b:
f4:33:9c:c0:c4:db:d2:59:1c:81:ff:42:87:52:16:c6:47:f5:
bb:1f:20:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:59:01 2026 by rpki-client