Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
File: b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer (raw, json)
Hash identifier: KMbD7+mOFx4pjsIfx2F2mA+6R60E3I+ICwwIrF916cc=
Subject key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026F4F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 26 Oct 2025 23:28:23 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 7721
AS: 132479
AS: 132623
AS: 133555
AS: 134413
AS: 134477
AS: 134488
AS: 136535
AS: 136591
AS: 136725
AS: 137264
AS: 137436
AS: 137835
AS: 137908
AS: 138211
AS: 138401
AS: 138535
AS: 139231
AS: 139317
AS: 139791
AS: 140498
AS: 140682
AS: 140731
AS: 140915
AS: 140961
AS: 141429
AS: 141445
AS: 141776
AS: 142164
AS: 142433
AS: 142438
AS: 142553
AS: 142586
AS: 142642
AS: 149510
AS: 150141
AS: 150173
AS: 150184
AS: 150373
AS: 151187
AS: 151193 -- 151194
AS: 151202
AS: 151331
AS: 151418
AS: 151490
AS: 151494
AS: 151673 -- 151674
AS: 151785
AS: 151814
AS: 152118
AS: 152134
AS: 152186
AS: 152598
AS: 152631
AS: 152697
AS: 152892
AS: 152911
AS: 152920 -- 152922
AS: 152930
AS: 153033 -- 153034
AS: 153057
AS: 153168
AS: 153170 -- 153172
AS: 153185 -- 153187
AS: 153189 -- 153190
AS: 153195
AS: 153330 -- 153333
AS: 153376
AS: 153458
AS: 153633
IP: 103.150.214.0/23
IP: 2406:840::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 17:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159567 (0x26f4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 26 23:28:23 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:91:d2:ce:e4:fc:55:88:67:f0:8f:e5:23:
45:e6:c9:51:01:0c:71:82:5b:d8:d4:12:3c:65:90:
19:bc:7e:7d:eb:7b:96:7c:bf:f6:6e:c7:d9:34:97:
b1:90:9e:27:3b:1b:1e:64:62:d9:35:23:92:74:38:
1c:8c:29:67:36:20:1b:2f:b1:5c:d7:0d:46:0f:a6:
3e:c5:a1:d2:da:d9:83:c0:84:02:73:d5:f1:d1:4d:
f4:76:ab:6c:ea:ff:08:87:a5:4f:20:71:df:de:30:
82:15:85:1d:a9:e1:63:b5:0a:86:82:55:93:33:76:
5f:d3:1a:6d:9c:11:a4:94:b5:97:65:9f:ea:55:90:
50:54:33:1b:f5:e1:ac:d5:0d:c8:20:01:12:a1:dd:
7d:4b:b2:93:76:4f:58:db:df:92:0f:5e:6d:fd:0d:
97:db:32:93:ed:1b:77:a7:d2:ef:5f:79:88:6e:b3:
7d:60:29:29:13:b0:66:4f:c7:37:f6:39:d1:68:6e:
23:45:bc:52:89:fc:6c:20:a5:04:0f:f7:08:5e:49:
ac:6f:58:70:db:2d:83:a7:80:a9:20:88:c2:cf:1f:
40:ee:f2:3d:f0:61:48:69:d4:e3:68:5e:d0:c5:52:
00:e3:10:09:97:5c:ef:ec:8f:74:30:76:74:20:2f:
52:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7721
132479
132623
133555
134413
134477
134488
136535
136591
136725
137264
137436
137835
137908
138211
138401
138535
139231
139317
139791
140498
140682
140731
140915
140961
141429
141445
141776
142164
142433
142438
142553
142586
142642
149510
150141
150173
150184
150373
151187
151193-151194
151202
151331
151418
151490
151494
151673-151674
151785
151814
152118
152134
152186
152598
152631
152697
152892
152911
152920-152922
152930
153033-153034
153057
153168
153170-153172
153185-153187
153189-153190
153195
153330-153333
153376
153458
153633
sbgp-ipAddrBlock: critical
IPv4:
103.150.214.0/23
IPv6:
2406:840::/32
Signature Algorithm: sha256WithRSAEncryption
98:97:a1:00:eb:74:48:f1:51:be:62:c1:f8:2b:48:49:60:9e:
f7:8d:53:bb:b1:2a:8c:48:73:5f:7d:5b:ec:b8:f3:0e:94:b6:
8c:de:22:48:a7:a8:23:08:d8:39:e9:64:7b:db:7a:cb:dc:c1:
2b:36:86:52:e5:8e:57:88:56:9c:67:ed:20:3c:eb:4f:41:4f:
27:b5:04:41:07:bb:ad:1f:7d:8e:b8:f3:db:96:57:10:a5:d0:
73:27:04:db:68:8d:7c:c6:a4:12:9a:9e:d9:4e:13:63:59:03:
96:86:e1:83:58:83:a5:a9:6c:de:1c:87:1c:15:4c:b2:b4:f7:
de:87:b5:84:03:0f:38:ff:cc:97:b7:e3:ab:af:65:35:b4:d1:
d9:02:68:cc:40:cb:d8:eb:ab:68:ff:aa:c1:8b:4a:21:20:2e:
60:01:e1:d3:f3:9a:f0:f6:85:ae:ad:20:7c:42:9f:0b:d8:38:
40:79:9c:92:4b:82:f1:4f:68:c1:05:65:ad:97:0c:a9:81:3d:
85:7b:42:d9:a1:1b:6e:46:f7:97:e8:37:9d:bd:54:41:95:5a:
5a:9c:e6:95:88:20:31:7b:79:1e:44:95:f3:79:2f:8d:ca:90:
fa:3e:8b:c6:c2:8d:18:ea:94:ef:59:85:5c:c2:24:a6:73:f5:
47:d1:1e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:30:24 2025 by rpki-client