Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
File: iOe1QfQimNbptRZdllJGzBzB9aI.cer (raw, json)
Hash identifier: Oy6MJJLf6RsZ5o2mSGi/ab+4JWT1NHxecS3WaNeV0wI=
Subject key identifier: 88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029FBE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 04:12:27 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 138575
IP: 103.133.140.0/22
IP: 2404:4d40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171966 (0x29fbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 04:12:27 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91A9D0F, serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ee:33:ed:59:7b:50:8a:19:f5:73:77:ec:2d:
29:d1:bd:ad:6c:e7:e5:55:e8:d0:86:f9:eb:17:47:
70:3e:17:6e:b3:97:13:8e:40:f0:e4:2e:bc:83:37:
24:a1:2b:90:f7:e7:e0:2d:07:31:a5:f0:f6:d1:dc:
dd:46:58:38:ce:44:69:6a:39:ab:01:9f:9e:91:aa:
0d:bb:01:8e:10:77:7d:0a:97:0a:09:b0:48:c8:e3:
89:d3:5c:1a:01:dc:79:74:f5:9d:a2:ef:f5:cd:74:
85:91:c0:76:62:c6:92:53:81:ef:d1:f1:7d:27:cc:
82:c1:76:8a:0b:36:10:dd:8c:e4:81:f6:e3:68:da:
cf:65:82:79:d6:30:35:53:5d:e7:97:30:eb:17:22:
1c:4a:cb:f1:8b:0d:2b:30:37:81:d4:67:cd:78:4a:
fb:f2:08:ec:5d:fb:e4:30:a6:ae:aa:b1:59:4b:ec:
ea:6c:85:c3:62:13:c7:6c:0e:28:69:9d:a9:98:99:
aa:2a:73:e3:c9:83:92:6d:da:d7:d3:ef:14:f4:38:
b2:eb:8a:ba:70:a6:6a:2b:65:ed:a6:ed:92:a7:23:
46:ce:05:7a:fd:70:16:f4:ae:09:1e:97:17:44:04:
cd:ca:2c:98:22:9d:44:a2:54:c0:33:68:e7:0a:85:
16:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138575
sbgp-ipAddrBlock: critical
IPv4:
103.133.140.0/22
IPv6:
2404:4d40::/32
Signature Algorithm: sha256WithRSAEncryption
c3:01:ad:3b:a2:52:19:4e:68:12:43:cb:36:08:74:94:b1:c0:
e1:20:1f:98:b5:d2:a6:a9:13:40:7c:50:59:1d:13:e5:0a:c6:
79:f8:5a:f2:61:12:7d:13:f2:c8:7a:2b:a2:23:9e:46:df:b0:
52:af:06:e8:82:48:4f:93:d7:60:43:7b:16:09:8e:d7:56:8f:
a2:8a:8f:7a:ab:a8:f3:48:be:44:7b:d0:7b:8e:96:db:1a:53:
fc:70:8b:d9:ab:65:5f:a5:c7:08:90:12:ac:a3:8f:9d:30:e8:
1c:ce:43:48:2a:d0:46:33:08:c4:20:9a:00:aa:d4:35:0a:05:
9b:4e:58:de:e1:5d:07:9a:ec:95:c3:59:a5:c2:11:07:28:5a:
ac:2b:35:0c:98:3a:71:46:9c:f5:87:58:d3:15:7d:bb:e2:c7:
37:04:6e:39:36:46:50:0a:d5:d6:f1:1b:cb:fb:85:78:44:77:
ce:99:e8:10:09:ae:92:c1:88:09:7b:a3:66:b3:c7:ea:ca:08:
b0:6b:93:07:71:29:d6:42:38:d6:b3:ab:78:aa:bf:12:e1:bc:
76:a0:1b:de:3c:4a:8d:ef:96:a5:43:7e:29:95:50:17:10:4f:
13:50:d2:17:58:3d:81:22:51:2a:55:f6:3e:ac:a4:ff:c9:c0:
21:f5:68:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:56:45 2026 by rpki-client