Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.cer
File: Ruh8_9-wwWKCqx7qxt0kJzKDdqY.cer (raw, json)
Hash identifier: gErBsB36cO0eVQDmtSRnyYK8cJBGtjvhp8Gimfu5pH4=
Subject key identifier: 46:E8:7C:FF:DF:B0:C1:62:82:AB:1E:EA:C6:DD:24:27:32:83:76:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A0B4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 01 Mar 2026 12:27:33 +0000
Certificate not after: Fri 28 May 2027 00:00:00 +0000
Subordinate resources: AS: 152320
IP: 103.85.72.0/22
IP: 203.175.12.0/22
IP: 2001:df0:a640::/47
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172212 (0x2a0b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 1 12:27:33 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=A91175BA, serialNumber=46E87CFFDFB0C16282AB1EEAC6DD2427328376A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8b:e8:c3:3d:11:cf:25:22:c6:a7:9d:54:71:
11:fd:d5:1f:3f:f9:03:7a:21:3c:58:d4:07:ef:13:
0f:fd:6c:a2:b9:09:27:69:82:42:33:ed:fd:9c:f2:
3c:82:14:3e:ef:bf:2d:7d:92:0b:20:73:bb:b5:fa:
c5:8b:a8:af:c9:ea:cb:10:9f:9b:5f:48:05:62:ba:
b3:07:91:97:cc:62:87:3c:d3:f8:ab:4b:f5:6c:c0:
4d:87:86:14:f6:2e:60:57:15:b9:fb:90:5f:06:39:
ae:1a:e5:d6:35:95:13:7c:81:cc:cc:49:59:8f:02:
bd:ad:49:3c:d6:3b:c3:d9:73:13:11:e2:44:94:1a:
ec:c7:44:17:b9:68:5c:d7:6f:39:2a:d6:a1:79:4c:
bb:69:87:8d:71:74:31:92:5c:5b:08:a3:3f:70:f1:
f7:93:a2:d4:c5:f3:ef:c4:c2:65:02:3d:71:12:08:
fd:fe:d5:2c:66:d2:ef:6e:d5:f4:77:0f:98:d6:d1:
6f:9c:9e:bc:a7:cf:ab:a1:85:7e:d8:89:24:bf:71:
b9:7e:37:c7:30:c6:24:ad:5d:89:8f:df:d4:f3:5d:
b4:0f:be:3f:fc:51:40:75:58:ef:ff:12:a2:0d:aa:
02:e5:1c:e1:6c:4b:92:0e:fc:bb:23:ea:da:05:c6:
2c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E8:7C:FF:DF:B0:C1:62:82:AB:1E:EA:C6:DD:24:27:32:83:76:A6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152320
sbgp-ipAddrBlock: critical
IPv4:
103.85.72.0/22
203.175.12.0/22
IPv6:
2001:df0:a640::/47
Signature Algorithm: sha256WithRSAEncryption
cf:90:ef:e8:dd:ec:e1:d6:4e:16:89:21:45:b7:c7:2e:35:fc:
fd:61:1d:ff:ec:03:db:c7:f2:c9:4f:68:ac:79:f4:8e:6f:78:
30:90:1a:60:07:cc:e2:d2:e7:85:97:00:a3:d2:d4:c1:e0:49:
bc:92:d3:d8:02:50:ca:2b:f8:92:a6:7d:b4:7b:53:69:54:51:
0d:7b:9a:b5:7f:90:74:75:4a:f3:61:de:8f:69:22:7f:ed:aa:
f1:9e:47:3e:96:d5:50:e9:7b:68:51:9b:f7:f3:18:2f:4f:2d:
23:e8:0b:73:a3:a9:9e:cc:64:ae:d1:57:6c:19:6f:16:f6:77:
27:de:90:85:d2:da:9c:7d:82:ff:1d:24:a8:fb:a4:2f:41:9a:
15:0c:db:4c:d4:c3:df:58:49:bf:63:72:27:88:85:da:ee:d3:
8d:cd:d7:8f:de:29:e0:0f:29:a6:2d:c5:c7:5a:9b:4a:7d:d3:
01:c2:13:15:80:86:6e:28:3c:36:0d:1e:0f:14:d6:d2:1e:1d:
85:15:f4:b9:d9:3b:6a:27:2e:41:22:f4:d5:fb:11:d3:99:90:
00:1c:ed:a2:0e:99:ec:df:b6:9f:59:ee:b6:1a:9f:a9:e2:e4:
25:07:f7:8e:74:18:d5:86:71:34:1d:d9:68:2d:50:f0:0d:66:
78:de:37:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:42 2026 by rpki-client