Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer
File: Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer (raw, json)
Hash identifier: cR+zrkx2QKfi7Y5rPI/TVZso2CVcGSo7l5jKbbbZ8XA=
Subject key identifier: 41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029C19
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:55:53 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 7603
IP: 103.176.196.0/23
IP: 2001:df0:22c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171033 (0x29c19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:55:53 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A913D6C9, serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:34:29:5e:87:84:92:21:13:1f:29:9a:64:
0a:77:b9:42:93:86:bb:20:1e:33:fe:7a:58:fe:7c:
7e:b9:9e:67:ac:9e:3e:6a:8d:40:66:6b:72:e4:44:
64:47:b6:6e:ab:a6:65:29:29:91:03:60:b0:68:5e:
a4:6d:61:14:0f:3c:0e:8f:bd:01:23:b3:9f:aa:f1:
30:59:0a:f7:91:63:a2:f4:6d:8e:ac:66:71:87:10:
a6:20:8e:4f:22:85:b4:ee:c7:32:22:54:58:24:cc:
59:1d:49:17:cd:ff:b8:fb:c4:84:0e:e0:a2:2e:3b:
22:00:69:88:af:e6:11:8d:27:da:1b:ac:85:29:ea:
ac:37:b7:ff:9e:24:49:b1:f6:35:7e:90:f5:a3:2b:
98:3a:95:7c:f4:06:b6:9e:64:f3:bb:81:cc:bc:24:
05:fd:2f:90:c3:be:8f:ac:8b:1d:c7:7f:fd:49:22:
9d:09:54:6a:e7:50:a5:f1:82:04:f8:de:89:5d:9c:
9e:3c:cf:a7:b0:99:cd:01:36:4d:1b:f4:3d:af:53:
4c:be:9a:3a:a8:fa:9f:cb:6c:29:8d:6c:c8:ea:b2:
50:95:d1:ff:c5:09:df:01:1d:f3:7e:26:5f:28:a6:
10:82:92:25:6b:0a:f4:c6:e1:0d:dc:bf:a1:eb:70:
5f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7603
sbgp-ipAddrBlock: critical
IPv4:
103.176.196.0/23
IPv6:
2001:df0:22c0::/48
Signature Algorithm: sha256WithRSAEncryption
b3:bc:be:eb:31:c2:3b:b6:33:65:14:b5:2b:c6:f9:ce:39:31:
6a:ca:87:e9:ca:51:93:c7:fe:6a:74:3b:68:2b:5b:99:19:8c:
bc:25:33:c1:d7:0d:60:1b:58:a3:36:16:dc:a8:38:5b:48:14:
ec:0e:bf:12:89:35:81:aa:ce:ca:0a:69:f0:9e:6a:92:b8:0c:
fb:fc:e1:c7:1e:41:df:d1:c2:0a:83:66:cb:d2:e0:8a:44:5f:
fc:61:83:ea:41:8b:41:f1:ff:0c:12:5c:02:d4:42:04:23:98:
e8:94:5f:ed:0d:a3:c6:21:76:ee:5f:61:f3:8b:d9:ac:85:25:
83:af:cf:dd:a6:71:14:e6:96:74:7b:a3:4e:a1:ee:81:66:82:
d9:47:c0:d6:b7:1b:d7:12:4a:63:77:84:12:50:1a:e5:85:11:
e4:e3:6f:50:d4:ee:04:5e:a8:14:88:43:7b:1f:f3:2c:39:f9:
58:c8:1c:8d:82:02:b0:d5:f4:b8:46:e4:4f:ee:a5:b3:ca:d0:
0a:90:56:d3:c3:6c:af:a4:bd:45:f6:34:e1:1e:af:b6:01:3e:
f0:5c:b4:b2:4a:80:7e:58:78:c5:66:56:5a:ba:16:69:b9:f8:
1d:2d:a4:25:55:e1:00:73:f3:71:ce:bd:76:3f:f4:8c:45:22:
e2:df:71:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:37 2026 by rpki-client