Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer
File: 7bQ_87hP5VlboMvE9ruHNxPkG7I.cer (raw, json)
Hash identifier: 2kWsbpPBEBrvRhjlNfNRblvS8EDuffgxaD3kT3EvHHI=
Subject key identifier: ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 027127
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 31 Oct 2025 17:43:44 +0000
Certificate not after: Sun 01 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 134353
IP: 103.129.44.0/22
IP: 2403:77c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 17:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160039 (0x27127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 31 17:43:44 2025 GMT
Not After : Mar 1 00:00:00 2026 GMT
Subject: CN=A9167D85, serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:29:c8:7f:cc:07:f7:5f:df:87:12:e6:4d:
12:14:20:45:de:b7:61:2b:bf:54:a4:b5:90:78:86:
fb:40:67:07:dd:ef:10:c8:55:94:fc:d2:3f:68:b0:
4d:21:34:15:33:4c:6c:17:f7:a4:bc:f5:d3:06:f2:
76:ab:dd:71:c4:f1:68:1c:48:02:93:3c:79:b6:20:
66:3b:ab:46:2b:68:38:b6:99:7a:c3:1e:2a:11:fb:
bc:aa:b1:d1:51:b0:3b:27:c4:a1:4d:28:e6:42:75:
41:98:cd:92:e3:e4:2f:c9:1c:17:8f:1f:81:53:79:
e5:39:b5:c6:43:5f:60:91:71:ae:3b:d4:cd:c6:b0:
35:0e:59:f4:06:06:71:38:b8:59:e4:ec:ae:14:2c:
8e:e3:c8:49:a6:ed:28:d3:83:ed:32:b6:d6:30:4b:
61:d6:c9:3b:f1:9c:d9:04:ce:4b:ce:ad:e6:12:41:
82:b6:da:fb:11:2b:44:f4:dc:cc:6f:b6:bd:cc:40:
40:00:e7:1d:dc:4f:a8:8b:fb:4c:b4:52:25:f4:d7:
05:35:d3:d7:df:2c:57:90:44:72:aa:76:20:c9:93:
e4:24:0b:77:f9:32:21:7b:f2:76:d4:fa:06:97:b1:
0d:e0:02:55:50:f2:74:48:09:45:23:95:f0:fe:ae:
35:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134353
sbgp-ipAddrBlock: critical
IPv4:
103.129.44.0/22
IPv6:
2403:77c0::/32
Signature Algorithm: sha256WithRSAEncryption
1b:8f:bf:e6:ec:63:26:8a:84:e8:72:20:b6:b1:61:b1:74:8c:
85:59:80:94:55:7f:de:77:d2:33:b1:89:0f:59:f1:7f:83:09:
48:c5:b0:ca:6b:98:c2:ec:9b:28:bc:65:62:8d:1c:cb:2b:e9:
ec:dd:e5:6a:97:06:61:c8:71:60:3f:b3:11:e2:e3:43:7e:e9:
aa:b7:3c:04:42:a4:a7:45:fe:98:63:b3:96:96:ca:5d:20:ad:
e7:01:49:cf:4b:fd:5e:53:cb:12:b6:1a:f2:65:28:b6:88:77:
f0:08:22:2a:af:38:0d:12:b3:31:f0:12:3e:b7:02:92:70:80:
f6:70:69:71:59:e1:59:cd:5b:90:0a:4d:1f:20:dd:b6:3b:8d:
15:cf:8a:67:f2:a8:69:f6:6c:01:88:8f:95:e4:ff:6c:39:35:
a1:12:8f:6a:0e:75:6b:ac:0c:a2:a6:08:aa:33:67:c5:08:74:
5a:73:6a:2f:8e:fa:73:8a:0a:8f:be:10:42:2f:3c:e2:17:11:
8e:f3:54:39:e7:9c:aa:a9:3a:8a:ea:d8:a6:bf:77:85:24:4d:
68:8b:62:06:09:97:6c:03:f5:d6:52:1e:0f:3b:84:c6:76:ea:
fa:03:94:f2:0c:ae:30:f7:4d:bd:27:f9:96:7f:fd:c8:73:6c:
12:f4:f2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:29:02 2025 by rpki-client