Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
File: rXHewTibFKASABB2mR9Zq-LKseY.cer (raw, json)
Hash identifier: 8g7oPUbmAbTS6p1mRnSERMgJ8E66BDbGX9W4ZTBzbi8=
Subject key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02ACDA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 15 Apr 2026 14:33:18 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 140077
IP: 103.148.50.0/23
IP: 2405:cbc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175322 (0x2acda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 15 14:33:18 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:ef:21:4a:f3:d3:fa:8d:47:a9:94:7f:06:
b8:ca:06:82:a1:76:f9:2e:6d:03:48:4a:99:05:09:
6b:8b:fa:9c:a2:80:d9:1e:b3:e3:09:ff:a6:fc:9b:
0b:39:f6:e0:f1:13:26:d7:ba:9e:32:fa:f0:2c:92:
af:21:1c:54:a9:ec:27:3d:18:e0:81:12:6f:fe:0d:
10:88:42:a7:07:3b:2b:26:66:64:c8:47:37:04:45:
06:a9:0a:36:f9:00:a0:97:99:b2:a9:0d:6c:11:c4:
3c:8c:a6:41:88:c4:6d:93:67:2a:a1:d8:ee:de:5e:
5b:a3:98:6c:b1:3f:98:61:6e:96:3b:98:8d:83:2a:
07:8f:84:a7:5d:6f:f2:70:45:9a:96:54:c1:1e:02:
de:c2:a0:50:c1:9c:4b:41:c5:c4:4b:1a:82:9c:cc:
69:ff:c8:40:b1:89:5b:02:47:4a:e2:f9:1a:4b:5f:
da:b0:4c:5b:c4:0a:8b:3d:4a:30:ee:6d:34:9a:ef:
dc:20:0d:4b:f8:ac:02:ce:e6:e6:bf:fc:f0:64:9c:
2f:ee:6f:3e:b9:a3:94:36:63:39:0a:fc:cc:dc:f9:
12:b2:67:54:a1:a8:7d:95:ed:bb:7f:55:71:c2:2b:
43:64:66:38:bb:2f:66:38:a0:25:bd:f3:47:fa:f1:
70:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140077
sbgp-ipAddrBlock: critical
IPv4:
103.148.50.0/23
IPv6:
2405:cbc0::/32
Signature Algorithm: sha256WithRSAEncryption
2f:4e:d1:e1:7d:09:db:2c:04:d3:e9:c3:d0:93:90:12:49:eb:
47:3b:95:61:0e:cf:be:63:d8:0f:12:8e:01:44:6a:21:2d:bb:
95:62:63:23:ed:a7:75:d5:cd:6e:21:ee:93:02:1d:97:3f:b3:
57:c8:4b:0b:c2:2e:40:74:4b:72:bb:b3:6c:87:28:dd:67:e0:
23:66:93:84:be:c2:c2:a6:2a:26:fa:8a:b0:66:37:cb:46:0a:
52:3e:c1:ae:2f:89:b4:3e:20:73:75:db:98:70:5e:d4:c6:b1:
81:7f:99:6c:19:d0:ef:e8:f2:4e:fc:d8:2a:b9:09:e3:84:5c:
02:29:92:68:04:2f:8f:94:00:78:be:66:79:67:96:27:80:a4:
a8:a2:28:76:a1:b0:e2:f7:cb:c5:c9:7a:01:7d:ad:74:36:fb:
22:d6:40:58:ff:dc:a1:5d:e3:f8:49:bd:3f:04:fd:25:18:fa:
59:04:a4:6a:7d:89:da:b1:7f:b1:87:36:18:90:9a:88:e4:a5:
cd:c6:8b:bc:ce:1a:c6:c8:94:4b:e8:98:43:c8:3d:c6:d1:96:
07:53:bf:49:a4:64:3b:b4:c4:29:34:1f:4d:b9:90:fe:52:8f:
54:05:2e:39:c1:3c:76:3d:26:5e:2d:16:7f:5b:e0:3d:9d:4b:
67:9d:cc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:20:43 2026 by rpki-client