Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
File: wS8PVy2jONITRB7wfKUR0anIm20.cer (raw, json)
Hash identifier: 3fLH1h5aYOQaTEvPgnAkI2/uxdJlupBV4gbFHeQwNEQ=
Subject key identifier: C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029341
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:14:13 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 139917
IP: 103.147.44.0/24
IP: 2001:df2:8380::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168769 (0x29341)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:14:13 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A916CA70, serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:59:5b:f2:c1:37:00:5b:81:a3:b7:aa:d9:
32:c7:e7:2f:87:8e:5a:98:de:35:81:42:42:75:56:
15:95:3b:b0:26:b3:2b:9f:ab:6f:ba:e7:a3:85:ba:
fb:84:7f:e5:d5:3f:bc:af:86:ef:0a:fc:dc:59:3f:
29:f6:1d:e2:71:ca:bd:89:d0:74:45:c0:7d:1a:f0:
8b:e6:02:33:a0:a7:ad:81:b6:d6:76:95:f1:f4:d2:
72:22:9d:8d:9f:7d:01:b7:f6:e8:12:b4:7b:bb:4a:
23:92:32:d5:48:e3:2a:c2:ed:bf:ac:6a:13:b5:00:
4f:c2:0a:9a:36:2f:40:e1:cb:7f:4a:4f:f4:0b:ea:
be:0c:ea:82:e4:ec:8c:22:42:c9:b2:76:a0:a0:f8:
e9:5f:b0:e0:bb:3b:a4:f8:2e:7c:35:d1:af:69:d6:
0b:72:d4:01:07:79:f7:59:f8:6f:3f:85:ba:60:f2:
a2:ef:88:f0:16:54:a9:c6:b4:52:67:6b:79:1d:b0:
e6:07:b4:42:f8:c1:30:f8:37:87:02:f6:99:8a:cc:
64:4c:41:ab:d8:22:d7:ed:94:c7:c4:ff:66:a7:11:
6e:87:db:25:c4:77:23:9a:c6:f2:17:24:b6:b6:a0:
e3:cc:84:52:a1:90:f2:da:8e:b3:cb:59:21:d0:05:
83:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139917
sbgp-ipAddrBlock: critical
IPv4:
103.147.44.0/24
IPv6:
2001:df2:8380::/48
Signature Algorithm: sha256WithRSAEncryption
d0:d5:0e:96:0b:95:c5:73:80:1b:0f:34:56:36:de:0f:5f:f0:
97:b6:29:be:f0:9d:61:5a:df:d5:58:77:ff:e3:0f:a5:b4:30:
a9:c0:d9:f7:85:f9:6c:5c:af:9f:9a:8b:75:6d:9a:41:08:db:
04:1e:2a:f6:5e:95:29:fe:f3:44:77:06:31:c8:df:95:56:b5:
77:79:b6:7b:1d:dd:0e:4f:37:b3:d8:b8:96:0e:9f:ee:62:80:
13:0e:a6:de:64:18:d3:d8:c5:ce:ff:2c:59:46:cf:ab:ff:21:
a3:63:49:95:10:b0:fc:92:9a:68:04:8a:6a:8f:e6:97:5c:f0:
60:51:7f:20:6d:5a:7d:47:ea:23:de:fc:58:13:80:4e:83:9c:
29:d3:4b:39:99:cc:f6:fe:c5:0b:3d:13:d4:0a:f6:85:d7:6f:
32:0e:6a:33:7d:af:64:67:17:c1:a3:b9:db:57:8d:79:21:34:
8c:d9:8a:bf:5c:3c:d6:47:e0:02:f0:8e:ad:e6:de:41:5c:1b:
13:d0:51:d3:61:ff:1e:ae:94:ad:7f:ad:1c:5c:d6:e9:5e:7d:
e4:75:8c:33:99:73:7d:89:a3:96:f4:37:58:5b:b3:95:61:11:
7d:98:e1:80:6e:df:db:73:2c:9b:55:94:ca:a4:3f:18:93:48:
87:ad:85:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:21:24 2026 by rpki-client