Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
File: BHuLKVTEerFcV1ht0ATriTl3xa8.cer (raw, json)
Hash identifier: aj3AWc5n4G0smDQKQULqdKg6xYU7sWxUHKJvJ1yDAwc=
Subject key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026F7D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 27 Oct 2025 16:09:55 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 138332
IP: 103.130.8.0/23
IP: 103.132.126.0/23
IP: 2001:df6:d900::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 17:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159613 (0x26f7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 27 16:09:55 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A918E8EB, serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5e:6b:a7:fd:bc:81:cd:04:e0:e0:40:c4:cd:
08:ce:48:2b:0a:a2:0e:45:ef:d5:e8:12:5f:bd:e2:
c8:56:a8:a0:e9:c7:04:b4:d1:ed:07:e3:18:56:0a:
4d:7b:fc:6b:cf:55:e0:fe:0d:21:2f:53:38:e2:08:
16:e0:6e:ed:ec:88:91:d4:5e:d6:f1:b1:a8:47:08:
8c:f2:a1:61:e6:4a:6b:8e:f8:31:ab:ae:84:4f:5d:
10:78:bd:1f:dc:fd:23:1f:8a:5a:8b:13:e4:47:89:
27:df:26:6a:3b:ac:2c:59:e5:8c:c2:39:16:07:eb:
30:30:d2:c1:61:5f:15:b4:a3:30:a4:97:5f:75:99:
81:17:41:77:7f:f0:cc:71:de:b1:34:be:94:5e:dc:
e2:47:ce:c5:a0:43:13:e3:96:cf:7a:be:c6:67:76:
e1:1e:bf:da:52:b8:28:af:00:44:f0:c9:24:c5:b3:
6a:e9:b6:ec:9e:08:b0:00:2a:fe:f5:f8:f3:61:57:
1c:b7:f8:5f:f2:a2:be:fe:a6:5c:66:e2:cf:be:49:
d7:d2:da:0b:80:a9:27:c1:aa:aa:a5:79:eb:41:2b:
96:48:75:3e:5d:f4:4f:14:bc:2c:e2:cd:4f:f9:5a:
77:2f:74:35:10:af:7d:85:9e:ff:fb:ad:65:3b:8e:
4e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138332
sbgp-ipAddrBlock: critical
IPv4:
103.130.8.0/23
103.132.126.0/23
IPv6:
2001:df6:d900::/48
Signature Algorithm: sha256WithRSAEncryption
13:b6:7d:78:d8:39:2a:41:d6:c4:a7:b5:f0:1d:23:77:49:8a:
3c:93:d7:21:62:5d:0b:36:21:1b:7d:82:3b:07:a6:af:21:10:
72:e3:1d:bf:76:32:b5:65:62:f5:09:df:4c:ba:28:01:58:c9:
bd:b4:3d:93:91:ce:aa:83:6c:45:74:67:27:ad:8a:d7:d0:c3:
5b:cf:27:49:bb:d2:5e:c6:65:19:82:dd:44:70:15:94:24:8c:
6c:2f:f2:ee:d0:b6:53:eb:23:92:b2:ac:78:1e:ee:70:06:86:
2e:53:6e:71:c7:81:bc:a1:f9:b5:40:0e:da:0a:a6:4d:4d:78:
82:ce:c6:03:7e:f1:92:e0:31:b7:ac:9c:1a:c2:99:ee:f7:15:
90:53:b7:17:75:38:52:0c:ca:fd:cd:4f:f6:01:eb:5e:a7:ce:
10:c8:a9:3b:87:d3:c5:fa:4e:68:0a:07:3e:27:fc:2f:f6:55:
31:3c:cf:e0:ca:95:61:85:84:7b:f3:d2:1c:e3:07:b4:09:da:
c1:a3:55:63:7d:d4:e8:83:54:37:46:48:1e:dc:90:72:d6:98:
bc:d6:05:e6:46:eb:6b:92:4c:5a:78:6b:90:2e:75:1c:fc:0f:
27:e4:f4:ca:f7:c3:6b:cd:36:fe:49:d7:cc:97:8d:84:99:dc:
45:80:b1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:29:38 2025 by rpki-client