Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer
File: esbv-wTCtYD1pWtqdGzf4FOvap4.cer (raw, json)
Hash identifier: ttgdxEWrWgRNDWzoUM3APwfrAZzGsg3K3Dh1wNyztak=
Subject key identifier: 7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02DCB2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 08 Oct 2026 13:09:10 +0000
Certificate not after: Mon 31 Jan 2028 00:00:00 +0000
Subordinate resources: AS: 138362
IP: 103.131.144.0/22
IP: 2403:cc40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 15:59:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187570 (0x2dcb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 8 13:09:10 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=A91747E1, serialNumber=7AC6EFFB04C2B580F5A56B6A746CDFE053AF6A9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:b7:bd:72:b9:d6:04:49:5c:26:e7:6e:2d:
45:5f:eb:8a:93:d4:32:89:84:90:14:a1:11:fe:d5:
94:b4:e9:fe:16:0b:d9:62:2b:30:18:de:1e:d9:f0:
62:9f:cb:2e:2a:2e:15:c6:b0:6f:10:97:3d:dd:2c:
99:95:24:31:f4:61:52:6e:32:3c:15:e1:85:df:8e:
39:9f:3a:6c:69:0b:04:e1:57:77:55:c6:1d:a0:a2:
09:7d:65:c6:8e:aa:6c:b7:d2:3c:0c:a3:fb:77:55:
b5:d5:60:05:8a:d4:a4:ce:60:f7:a9:7d:5e:d0:07:
0c:84:c8:ca:d9:c0:cf:82:8f:54:fe:26:30:44:5f:
0b:1a:16:c3:55:63:db:98:15:8a:94:1a:37:1a:ad:
f9:43:b1:41:aa:6f:ba:c2:8a:1b:72:c3:37:34:a3:
7d:68:1b:e3:ac:ca:2c:0d:fc:67:49:7c:20:0d:a8:
2e:a5:7f:53:92:67:aa:b4:99:80:58:2b:ec:ad:64:
a5:0a:da:da:53:59:e7:b0:5f:31:fb:3b:0b:78:11:
06:88:94:84:ff:d0:d5:1c:72:7a:35:4d:fb:c4:ae:
1c:11:2f:86:3c:7d:1d:8d:dd:b8:7d:9a:f7:ae:92:
5e:3d:0d:c7:9e:09:21:de:86:35:df:c7:f4:65:11:
93:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138362
sbgp-ipAddrBlock: critical
IPv4:
103.131.144.0/22
IPv6:
2403:cc40::/32
Signature Algorithm: sha256WithRSAEncryption
d0:a1:49:e5:0f:b4:d6:67:b1:8b:71:94:c0:8c:13:3a:f7:f5:
0c:b3:1e:64:5c:ad:3a:1e:ac:d3:9f:10:00:e6:52:68:74:b8:
b0:6d:51:94:68:b5:a6:75:64:0b:1e:cf:61:1d:7c:52:14:64:
93:69:48:d6:8d:17:b1:4c:b0:58:e4:ff:f5:d9:ab:2c:80:27:
0e:fd:86:9c:67:15:c2:a2:c6:cc:ec:70:d3:2a:9c:75:d3:bf:
a3:dd:84:6d:b4:06:fe:b9:d9:a8:38:e6:54:1c:af:91:8f:da:
72:38:70:a1:35:85:4b:44:f0:39:19:f7:16:12:fb:8e:4a:1c:
f7:71:6a:37:6b:42:63:15:f8:67:5d:ea:06:a4:06:3f:f9:c6:
e9:96:b2:d2:94:8c:9d:78:af:3e:35:5a:a3:32:cc:64:d0:ec:
eb:3b:e9:a4:6c:c9:b7:46:f0:11:b0:09:e3:ac:a7:89:20:11:
d4:31:53:12:7f:4f:fb:a8:51:cd:d5:a6:1f:8c:79:7e:36:2f:
fb:74:bd:2d:ba:94:4e:18:bd:a5:ca:72:59:e2:e4:d0:e5:6d:
ad:5b:cd:de:8c:0a:24:1c:bb:55:fb:11:0a:76:5f:b5:a1:ca:
75:45:cb:9c:75:02:e2:34:8a:c6:38:da:fa:b0:fc:a9:9c:64:
05:d4:5d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:48:34 2026 by rpki-client