Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
File: bthM_0l2uSPjFQlkdt1mI-Sci3k.cer (raw, json)
Hash identifier: hPQKwZ2X9bwjgolu3WqR0xDbbbjTdjyAfLgzjFqknPg=
Subject key identifier: 6E:D8:4C:FF:49:76:B9:23:E3:15:09:64:76:DD:66:23:E4:9C:8B:79
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025A6F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
caRepository: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/
Notify URL: https://rrdp-rps.arin.net/notification.xml
Certificate not before: Fri 01 Aug 2025 22:16:32 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 151642
IP: 103.244.226.0/23
IP: 2001:df2:c1c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 04:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154223 (0x25a6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 1 22:16:32 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91A9C1E0000, serialNumber=6ED84CFF4976B923E315096476DD6623E49C8B79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:eb:f4:eb:c9:2f:91:9d:05:7c:70:eb:36:
40:f3:09:f5:0e:4d:09:79:90:02:04:a2:14:cd:17:
80:12:21:40:b4:92:6c:23:b4:29:fa:0b:c1:d9:43:
cd:1a:70:1d:51:8e:02:0d:92:e4:7e:00:d5:63:be:
74:9b:91:39:cd:46:5a:36:e4:a2:73:36:45:bf:d7:
b4:94:aa:d2:eb:0b:e5:dc:24:c3:94:5e:e3:c6:56:
e5:24:75:98:cd:a9:e5:a9:68:a5:35:0d:6c:ad:f9:
e0:a5:98:88:60:0e:a9:a3:60:c5:a8:8b:10:72:9f:
62:25:f6:e8:f2:14:96:a7:13:ef:30:89:c7:ee:88:
3e:53:ae:ea:87:f0:22:63:32:ca:3b:36:30:b2:af:
b2:70:d4:87:e0:fe:42:23:c5:d5:e9:79:6e:e8:d7:
fb:85:0a:d2:fd:e8:99:3e:88:ea:9a:09:82:8b:41:
08:0b:42:23:7a:c8:a2:cb:3f:d6:48:fa:3c:48:14:
e6:8a:bf:07:c9:d4:4c:ba:4b:63:c9:9c:60:39:dd:
52:ad:d6:9e:e5:09:d6:97:68:97:33:b3:f2:a3:6d:
82:81:a4:6a:0c:c6:c4:d1:ba:18:6b:f7:6a:29:58:
0d:e9:4b:f3:e1:29:05:db:63:eb:41:73:f2:6d:7f:
8f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D8:4C:FF:49:76:B9:23:E3:15:09:64:76:DD:66:23:E4:9C:8B:79
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/
RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151642
sbgp-ipAddrBlock: critical
IPv4:
103.244.226.0/23
IPv6:
2001:df2:c1c0::/48
Signature Algorithm: sha256WithRSAEncryption
44:09:ec:36:24:2b:fc:c3:ae:71:5d:2a:44:60:44:64:00:6d:
05:c4:67:4c:75:5f:5b:e7:b5:9c:c4:6e:cc:b9:19:47:69:3a:
ee:54:45:66:22:68:a5:42:2d:03:be:25:9b:4f:0d:2b:2c:79:
db:64:1f:8d:fb:db:7d:88:dc:25:17:c6:90:7a:bc:47:2e:cb:
a1:6a:93:1f:46:b2:93:84:17:23:31:1b:ec:4a:28:66:df:f3:
6d:6a:c7:fc:71:d6:a0:69:c8:02:f1:ec:d6:04:60:fd:ae:bd:
1c:f6:f9:fd:b9:25:4b:33:db:ae:49:ca:7a:43:02:f7:41:3e:
a9:b2:e0:3d:b8:7f:d4:69:32:66:a5:11:17:56:81:03:07:ed:
48:0a:cf:18:a5:cd:c9:28:59:99:38:77:15:89:f3:ed:06:a5:
12:fb:ef:e1:75:f6:8a:35:69:cf:18:c2:64:e0:1f:30:9f:96:
5d:1f:6f:de:f2:03:fc:c4:81:b1:f2:f1:48:15:74:86:02:aa:
7a:f2:2a:1f:1f:0a:dc:db:10:b8:2e:bd:98:4c:cd:66:78:5b:
ee:6e:65:9a:d8:2e:aa:5a:16:02:18:37:4b:f6:14:66:42:61:
0c:19:f5:60:52:32:20:f2:66:e1:2a:69:d7:71:dd:3e:5b:f0:
cb:5b:96:54
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:32:16 2025 by rpki-client