Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer
File: 7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer (raw, json)
Hash identifier: M0h+vGes5PGsANfevS2b36mGYXoVmkSzTRZ2YdeOeY0=
Subject key identifier: EE:FD:3E:86:AF:74:F9:48:34:64:01:6B:93:4F:C3:EF:14:C8:2D:46
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024D71
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 10 Jun 2025 18:38:52 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 132262
IP: 103.9.64.0/22
IP: 2403:d100::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150897 (0x24d71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 10 18:38:52 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91C0FF9, serialNumber=EEFD3E86AF74F9483464016B934FC3EF14C82D46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:f5:4c:32:77:3a:a9:ce:c9:19:b5:20:af:
4a:3b:b4:7b:c2:4c:61:9d:67:84:e1:a7:f0:6b:2d:
21:0e:74:99:9b:1e:13:60:6a:8d:98:d8:e6:90:84:
0b:54:03:65:76:b2:77:bb:d1:2f:a3:10:eb:ab:26:
f1:40:c9:84:dd:29:0f:10:89:bb:33:5d:e5:18:f3:
bd:38:07:50:f5:1e:d8:a4:3b:d5:80:9a:b0:ee:06:
26:56:fb:64:73:d0:51:f8:13:d6:e7:fd:1c:8e:d8:
f5:29:28:b0:06:aa:65:1f:1e:ee:e2:aa:fa:4f:e0:
5a:e3:bc:9b:9e:d6:78:f3:9f:dc:8f:4b:43:0d:fd:
06:cd:93:4c:6b:5f:2d:c6:e4:2e:32:5e:09:7f:d7:
70:45:9a:09:b9:4c:20:98:e3:ea:65:46:d5:1d:49:
c1:7a:36:a2:ce:09:4f:52:ca:68:f5:1b:4c:02:c6:
af:1e:30:6d:4a:8d:90:bc:f1:54:8f:81:4b:b6:09:
38:f3:cc:3a:4b:d8:86:80:fa:e9:66:2d:df:ef:53:
96:a7:dc:50:20:98:b0:ca:f9:87:04:dd:1a:aa:f7:
fe:8a:c6:ed:fa:02:db:c5:c4:b5:96:6f:fa:60:16:
7f:06:27:34:d2:cb:4e:c9:b0:30:f3:c6:da:f7:14:
32:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FD:3E:86:AF:74:F9:48:34:64:01:6B:93:4F:C3:EF:14:C8:2D:46
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132262
sbgp-ipAddrBlock: critical
IPv4:
103.9.64.0/22
IPv6:
2403:d100::/32
Signature Algorithm: sha256WithRSAEncryption
9b:82:82:62:e6:57:d1:7a:65:e5:76:f4:fc:5e:e4:a6:a9:67:
be:96:c5:6e:e5:22:52:22:38:f6:7f:ce:47:99:0b:90:87:c0:
68:fa:19:61:c0:07:b6:53:24:f4:ac:43:52:26:3f:0f:70:e2:
f8:33:24:32:27:6b:5a:61:1a:7a:42:f7:30:bb:9e:6d:b6:70:
4e:b6:cd:18:cf:2d:7d:fd:96:af:9a:84:66:f0:ef:50:9d:0e:
46:4d:d5:e1:88:57:24:00:9a:41:6e:a5:62:cb:fa:12:89:f0:
ba:8e:a5:df:8b:00:4f:7f:81:10:ca:ff:43:37:ae:c3:a5:34:
38:f4:d4:f8:e9:de:c2:19:87:23:35:53:6b:dd:5c:39:0c:63:
05:38:d8:d6:b9:96:0f:1c:56:bb:08:8a:c6:61:ed:e3:d9:43:
00:e8:2f:c6:bb:20:dd:c9:51:84:d8:18:70:bd:fc:32:42:eb:
99:b0:80:c2:d8:20:9b:5b:05:f5:98:54:73:e6:88:0a:ef:a4:
8a:94:5f:7f:07:ff:3c:c4:13:ae:6e:3f:01:c2:d0:e5:d4:b7:
29:b4:5c:87:48:de:03:19:77:41:08:6f:d1:82:06:66:72:64:
41:71:24:db:07:34:5e:8c:ac:f6:79:24:6d:46:01:64:45:8a:
fe:96:60:41
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAk1xMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDYxMDE4Mzg1MloXDTI2MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzBGRjkxMTAvBgNVBAUTKEVFRkQzRTg2QUY3NEY5NDgzNDY0MDE2
QjkzNEZDM0VGMTRDODJENDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCz1fVMMnc6qc7JGbUgr0o7tHvCTGGdZ4Thp/BrLSEOdJmbHhNgao2Y2OaQhAtU
A2V2sne70S+jEOurJvFAyYTdKQ8QibszXeUY8704B1D1HtikO9WAmrDuBiZW+2Rz
0FH4E9bn/RyO2PUpKLAGqmUfHu7iqvpP4FrjvJue1njzn9yPS0MN/QbNk0xrXy3G
5C4yXgl/13BFmgm5TCCY4+plRtUdScF6NqLOCU9Symj1G0wCxq8eMG1KjZC88VSP
gUu2CTjzzDpL2IaA+ulmLd/vU5an3FAgmLDK+YcE3Rqq9/6Kxu36AtvFxLWWb/pg
Fn8GJzTSy07JsDDzxtr3FDKBAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU7v0+hq90
+Ug0ZAFrk0/D7xTILUYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUMwRkY5L0RENkE3NjUwODBDRTExRUI5MzUwMTg2OEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDMEZGOS9ERDZBNzY1MDgwQ0UxMUVCOTM1MDE4NjhDNEY5QUUwMi83djAtaHE5
MC1VZzBaQUZyazBfRDd4VElMVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgSmMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZwlAMA0EAgAC
MAcDBQAkA9EAMA0GCSqGSIb3DQEBCwUAA4IBAQCbgoJi5lfRemXldvT8XuSmqWe+
lsVu5SJSIjj2f85HmQuQh8Bo+hlhwAe2UyT0rENSJj8PcOL4MyQyJ2taYRp6Qvcw
u55ttnBOts0Yzy19/ZavmoRm8O9QnQ5GTdXhiFckAJpBbqViy/oSifC6jqXfiwBP
f4EQyv9DN67DpTQ49NT46d7CGYcjNVNr3Vw5DGMFONjWuZYPHFa7CIrGYe3j2UMA
6C/GuyDdyVGE2BhwvfwyQuuZsIDC2CCbWwX1mFRz5ogK76SKlF9/B/88xBOubj8B
wtDl1LcptFyHSN4DGXdBCG/RggZmcmRBcSTbBzRejKz2eSRtRgFkRYr+lmBB
-----END CERTIFICATE-----
Generated at Sat Jun 14 17:17:52 2025 by rpki-client