
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer
File: dQWoa19PqlBUPSSMbwhUxQWu3A8.cer (raw, json)
Hash identifier: ZSlEJtThJy12hIU6Wd0W723r61yy2r6nEHqvNYWGKCY=
Subject key identifier: 75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02A04B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 28 Feb 2026 13:37:03 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 140050
AS: 142261
IP: 103.147.226.0/23
IP: 2001:df4:d180::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172107 (0x2a04b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 28 13:37:03 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A918D0E6, serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:7f:00:c5:f4:6b:95:3c:3e:a0:c4:d7:50:
98:4f:59:d6:60:94:f4:5b:03:72:79:ae:15:07:d2:
cb:54:f9:2a:5d:63:d9:50:05:49:65:9f:d2:3a:42:
ef:12:3e:ba:63:37:07:ef:4f:97:50:28:47:39:5c:
f4:0a:24:87:bc:ad:ac:d0:f7:c5:58:56:be:df:b4:
f5:65:c9:33:7f:ae:80:40:08:6f:50:dd:2e:f3:6e:
5c:69:d7:7b:3a:8f:d0:89:9e:7a:0e:4f:1d:52:2d:
3a:85:b5:1f:53:a8:76:2d:23:88:e9:c8:ad:60:8c:
f9:d2:05:ae:f1:9a:88:66:2e:07:5d:fd:86:f5:d2:
e0:87:1b:b6:54:c1:13:49:23:28:d6:2b:f9:8c:bc:
cf:75:b0:b2:cd:db:3e:21:e2:c6:d4:93:74:70:e0:
a0:f9:d8:9f:38:be:1f:23:37:25:61:f6:7a:ef:06:
64:27:89:4d:aa:ae:83:f1:fd:0c:5d:38:a8:8a:5b:
ba:9d:80:d2:2d:cf:bc:ac:d6:dd:66:80:b5:c0:e7:
67:41:6a:ed:76:91:5f:e1:57:bb:57:f3:b8:50:85:
ea:20:09:65:93:ca:ec:85:fb:bf:8f:b5:cb:29:51:
71:09:46:35:d2:7b:d1:96:d2:4b:c3:d1:2a:26:30:
8d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140050
142261
sbgp-ipAddrBlock: critical
IPv4:
103.147.226.0/23
IPv6:
2001:df4:d180::/48
Signature Algorithm: sha256WithRSAEncryption
0d:6d:51:7f:5f:5d:d0:b7:43:ce:c9:8c:cd:1b:ce:dc:8f:b3:
7d:a3:9f:2f:de:a8:a1:57:1b:b5:bf:3c:20:e1:39:b4:7e:ae:
af:0a:87:35:b6:78:e5:a8:2f:a2:94:25:20:f0:ae:79:66:da:
bc:ef:90:66:b6:45:17:9e:47:59:f4:bd:a7:67:e1:04:4f:39:
cb:70:27:07:76:12:05:ee:1d:4f:a2:3f:c2:a0:4f:b3:2c:57:
be:f4:7e:a2:1d:19:09:ee:e3:ad:5e:fc:b9:ba:74:ac:c2:af:
43:95:46:a9:db:22:97:f2:04:d8:89:1f:33:38:25:0a:cd:c7:
8b:ca:e4:8d:c3:d5:1e:16:74:3c:a7:36:1b:47:80:43:a4:b7:
35:1c:00:85:46:56:e3:e6:02:ec:ea:9a:2f:da:df:3b:8b:fb:
ca:74:a2:2f:87:df:8b:3b:9f:a5:79:48:af:55:b9:86:b6:f4:
36:8c:d0:f8:98:a5:39:bc:ac:17:6c:cd:cb:00:d2:7e:b2:fb:
bf:87:0d:25:88:c3:55:fa:57:6e:50:2f:06:90:2a:47:a7:61:
c7:7d:58:d8:ea:9b:f5:b4:bb:f7:c4:66:a8:c6:d1:20:e9:58:
0e:b9:0c:5b:e6:1e:a3:16:2c:22:22:4f:5b:00:bb:41:92:80:
e5:57:6c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:45 2026 by rpki-client