Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
File: hlng_trNtpATntXTNVh0di16GJ0.cer (raw, json)
Hash identifier: z5sj4gJBTvgBTMl9FBxJRd5x8jLzjIWRXrppXFrdST8=
Subject key identifier: 86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D4A7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 08 Sep 2026 13:39:10 +0000
Certificate not after: Wed 01 Dec 2027 00:00:00 +0000
Subordinate resources: AS: 133059
IP: 43.246.180.0/22
IP: 103.241.76.0/22
IP: 2407:d100::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185511 (0x2d4a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 8 13:39:10 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=A91AC0BB, serialNumber=8659E0FEDACDB690139ED5D3355874762D7A189D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:35:06:12:1f:af:6f:89:89:86:35:66:04:
ad:c6:be:d3:b5:c3:e6:c5:cf:d5:e0:7f:d2:d9:ac:
16:aa:8a:4e:9a:cb:94:ba:5d:66:dd:af:2c:18:9e:
c2:c9:57:ba:35:1b:3b:e1:ab:dd:33:63:c5:e1:79:
d4:88:77:ee:5a:d1:c6:f8:f8:28:3e:4d:82:db:af:
77:1f:7f:e8:5f:7f:98:35:95:b2:ce:30:db:6e:f3:
1a:c6:0a:3a:26:7b:84:03:78:1a:97:52:95:78:28:
72:31:56:7b:dc:e1:ae:f9:8f:86:aa:ea:2d:38:16:
53:e7:ff:0b:f0:5f:6e:c5:6b:fc:b6:06:f9:3a:b8:
79:4a:72:9f:a2:00:f8:70:8a:5c:b9:85:eb:14:af:
ca:0f:38:6c:7d:56:1f:a4:bc:77:0c:6f:0f:44:f5:
e2:40:81:f7:43:29:48:16:30:0d:34:06:1d:2e:fc:
f4:3b:92:64:ce:ae:69:23:5b:9d:b7:42:c4:1d:e5:
e1:80:5d:70:31:45:39:be:65:38:9b:17:b4:38:a0:
d0:85:e6:de:3c:6e:cf:ec:c3:37:0e:06:42:98:03:
f1:da:b7:8f:5c:12:a2:77:cb:71:db:46:e9:2d:f1:
6a:15:4a:88:ad:64:89:f6:6d:06:b8:06:92:b4:cd:
4a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133059
sbgp-ipAddrBlock: critical
IPv4:
43.246.180.0/22
103.241.76.0/22
IPv6:
2407:d100::/32
Signature Algorithm: sha256WithRSAEncryption
7c:27:29:25:d6:68:f2:d1:e6:b7:f3:dd:63:47:6d:84:7f:49:
18:aa:a7:e9:8c:f3:89:42:f7:55:ff:36:3c:22:c5:5d:61:7d:
60:cd:b2:fa:41:bc:e2:49:ad:e5:5b:86:1b:8e:4d:3d:d5:25:
66:6d:25:53:40:85:aa:9f:31:2b:24:86:de:6e:ec:cf:4e:62:
9d:75:9c:70:ca:77:71:89:8e:a5:f1:d1:bb:b0:6e:e8:17:aa:
52:06:17:55:a7:c5:4e:ee:bc:e3:91:08:b6:66:62:26:11:c7:
4d:24:99:54:93:69:40:a1:c3:e1:f6:70:2f:7a:56:69:7f:94:
80:d1:c9:05:32:fa:4d:ce:49:65:83:7a:80:ec:61:50:a2:5c:
a8:fc:a9:a6:57:be:22:ef:fc:7e:85:b4:b6:82:37:3c:a0:cc:
66:53:bd:6a:93:5b:91:e4:05:90:e1:b0:72:bf:92:4c:c8:59:
31:f0:c4:44:e7:86:e8:51:ff:4e:e6:4b:d3:bd:ff:21:45:9a:
96:a8:06:87:5e:56:cb:fe:34:22:e6:40:80:cf:c9:9e:5c:e0:
a6:cc:ad:e0:20:7e:e1:22:46:b6:74:39:3c:c7:56:4f:14:42:
44:6c:66:08:07:f9:1d:ea:9b:6d:8b:35:56:55:91:31:af:b9:
0a:40:9f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:34:36 2026 by rpki-client