Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hmRWQenizPzosun9-5X-a_CfBcU.cer
File: hmRWQenizPzosun9-5X-a_CfBcU.cer (raw, json)
Hash identifier: 7yhoqXdDc/eGk+ZacV5Ixac6RN0n/DW+zHmUBkOq3qI=
Subject key identifier: 86:64:56:41:E9:E2:CC:FC:E8:B2:E9:FD:FB:95:FE:6B:F0:9F:05:C5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029A72
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:48:35 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 139656
IP: 202.27.67.0/24
IP: 202.49.143.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170610 (0x29a72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:48:35 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91C3DEA, serialNumber=86645641E9E2CCFCE8B2E9FDFB95FE6BF09F05C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:94:1a:be:60:2a:93:7c:13:3e:f0:6d:5e:
c3:a8:7e:20:62:45:a3:f4:9d:63:1a:25:41:29:59:
df:a3:f1:e5:61:cb:86:e2:12:4b:d5:5d:dc:8a:6c:
25:83:72:4a:d3:ab:ea:54:8d:5f:d4:f4:0e:ae:77:
79:6e:3e:b0:54:2b:02:7c:04:92:c9:09:41:0b:5a:
cb:c9:88:24:d1:45:fa:f8:e0:11:57:fd:5a:37:af:
94:69:d0:f9:e4:c9:30:42:da:19:a4:16:e8:73:57:
80:9c:1d:61:ff:68:ef:9f:d5:c5:2d:3e:b7:f1:b8:
1c:d5:4d:ad:54:67:34:45:9d:69:fd:53:70:5a:38:
c5:cd:8e:5d:7a:0c:78:0e:bd:c7:8a:ff:52:63:05:
5e:07:0c:36:fc:ee:f1:0d:41:33:6c:45:58:6e:1f:
9c:85:14:5e:e8:b6:04:8f:d4:2e:04:92:56:f4:57:
53:ab:06:62:a0:f6:e8:8b:41:ea:3d:ec:76:b2:cf:
f1:fb:22:84:f0:0e:11:be:40:a6:e8:0a:33:24:6c:
8c:00:d3:59:78:23:c2:cf:15:f9:6b:b9:2f:dc:1e:
7e:c8:df:f9:b1:ed:f2:fb:c3:e4:88:f0:b4:30:6a:
c0:55:55:fe:a3:a8:ba:ce:51:67:52:ee:6f:e6:07:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:64:56:41:E9:E2:CC:FC:E8:B2:E9:FD:FB:95:FE:6B:F0:9F:05:C5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139656
sbgp-ipAddrBlock: critical
IPv4:
202.27.67.0/24
202.49.143.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:aa:73:8d:89:95:ab:cd:d9:30:4c:fb:17:8d:97:4f:2c:44:
59:0a:a9:ba:db:c3:be:a4:9c:47:e6:06:28:fe:0a:01:85:37:
f7:69:36:3a:f5:0a:a4:31:58:2a:52:40:29:d0:1d:1b:24:71:
51:dd:e4:f3:71:a7:73:0b:43:fa:1a:ed:96:cf:21:58:a3:d0:
75:83:f2:4e:ff:27:69:81:7d:c5:3e:93:58:63:d1:18:c7:11:
9c:8a:de:36:43:1f:ef:15:28:20:7b:ef:f2:b5:ac:90:12:c9:
85:9a:57:63:fd:35:a9:99:93:d9:23:2f:94:f7:4e:9f:90:43:
ef:65:15:e3:42:36:88:8c:c7:8c:1f:72:d6:72:6e:72:20:c6:
cc:b7:79:cf:ef:d1:d6:8d:3d:2e:db:e1:62:ca:d7:0f:07:c0:
81:5b:15:2c:83:cb:15:02:db:26:15:9a:3f:17:1f:75:b3:0c:
b4:9b:38:46:e1:1b:88:08:57:dc:f3:9d:a4:4f:ad:51:5a:b7:
40:7d:38:54:a5:a2:0b:fd:e8:35:ed:98:7b:60:13:cb:f3:86:
ca:57:47:c7:f1:c9:a0:d1:99:9c:26:05:e5:a3:eb:78:0a:5d:
60:b0:1e:84:b3:e5:70:b4:8a:48:69:a1:19:b7:e4:4f:2b:fb:
f2:a0:62:32
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIDAppyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIyNzAzNDgzNVoXDTI3MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzNERUExMTAvBgNVBAUTKDg2NjQ1NjQxRTlFMkNDRkNFOEIyRTlG
REZCOTVGRTZCRjA5RjA1QzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9p5QavmAqk3wTPvBtXsOofiBiRaP0nWMaJUEpWd+j8eVhy4biEkvVXdyKbCWD
ckrTq+pUjV/U9A6ud3luPrBUKwJ8BJLJCUELWsvJiCTRRfr44BFX/Vo3r5Rp0Pnk
yTBC2hmkFuhzV4CcHWH/aO+f1cUtPrfxuBzVTa1UZzRFnWn9U3BaOMXNjl16DHgO
vceK/1JjBV4HDDb87vENQTNsRVhuH5yFFF7otgSP1C4Eklb0V1OrBmKg9uiLQeo9
7Hayz/H7IoTwDhG+QKboCjMkbIwA01l4I8LPFflruS/cHn7I3/mx7fL7w+SI8LQw
asBVVf6jqLrOUWdS7m/mB6HVAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUhmRWQeni
zPzosun9+5X+a/CfBcUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUMzREVBL0FBRUVBNDFDRkM5RDExRjA5M0U2QjE2OTVENkY1NkJDLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDM0RFQS9BQUVFQTQxQ0ZDOUQxMUYwOTNFNkIxNjk1RDZGNTZCQy9obVJXUWVu
aXpQem9zdW45LTVYLWFfQ2ZCY1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiGIMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAyhtDAwQAyjGP
MA0GCSqGSIb3DQEBCwUAA4IBAQClqnONiZWrzdkwTPsXjZdPLERZCqm628O+pJxH
5gYo/goBhTf3aTY69QqkMVgqUkAp0B0bJHFR3eTzcadzC0P6Gu2WzyFYo9B1g/JO
/ydpgX3FPpNYY9EYxxGcit42Qx/vFSgge+/ytayQEsmFmldj/TWpmZPZIy+U906f
kEPvZRXjQjaIjMeMH3LWcm5yIMbMt3nP79HWjT0u2+FiytcPB8CBWxUsg8sVAtsm
FZo/Fx91swy0mzhG4RuICFfc852kT61RWrdAfThUpaIL/eg17Zh7YBPL84bKV0fH
8cmg0ZmcJgXlo+t4Cl1gsB6Es+VwtIpIaaEZt+RPK/vyoGIy
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:37 2026 by rpki-client