Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer
File: hoEbsmeu-FQA2-cpcCMtQRotmuk.cer (raw, json)
Hash identifier: JJGEcxEeBAdIVt0T9rk/nj7QlXzuepf0WJA0Wo2HAw8=
Subject key identifier: 86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0257A7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 24 Jul 2025 13:29:00 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 58655
IP: 103.12.172.0/22
IP: 2404:7500::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 Aug 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153511 (0x257a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 24 13:29:00 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A913AE7C, serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:1d:52:14:eb:48:10:f1:a2:19:9a:27:6f:
cd:a5:c9:37:17:e5:1a:21:f3:97:bc:90:5d:e0:93:
5a:6c:67:21:f0:fa:ce:1c:0b:8c:8b:df:43:73:04:
32:f5:17:26:37:66:14:3e:f7:37:14:d0:48:59:f3:
3a:03:97:69:44:8d:08:18:06:a5:b1:63:93:4c:fd:
0a:3b:4c:19:3e:2e:a8:b7:12:e6:af:69:31:21:be:
aa:da:f5:47:2f:af:02:c0:df:40:78:94:b7:b7:04:
2a:3a:a2:08:51:5e:26:b2:90:d6:76:c8:c7:f2:33:
e6:e4:4c:09:e8:02:ee:a6:5a:d2:65:b7:c8:70:bb:
49:06:60:0b:0b:7a:60:99:7b:4d:9c:a0:7f:76:1b:
38:22:f3:c6:f4:18:7c:3a:e2:4b:3f:6a:47:61:f1:
39:07:bc:36:7c:49:3e:2e:14:85:c5:98:d2:39:15:
1b:b5:c4:23:ac:87:df:d1:2b:98:87:46:08:ea:7c:
eb:b1:9e:86:da:86:f7:ea:a5:54:18:6f:55:43:c2:
69:08:79:cd:c5:13:8f:e5:5c:fc:22:89:d1:f0:4f:
f8:bf:2d:74:e2:75:06:ca:dd:51:d0:ec:0f:94:b2:
b2:f8:1d:c1:7c:fb:d8:87:bd:04:45:0b:08:3b:df:
e4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58655
sbgp-ipAddrBlock: critical
IPv4:
103.12.172.0/22
IPv6:
2404:7500::/32
Signature Algorithm: sha256WithRSAEncryption
ae:6d:7c:e6:f9:cf:8e:ad:08:7f:18:da:50:a4:42:1e:3d:74:
e7:13:42:76:6d:63:1e:6b:93:36:68:e7:22:c4:15:a2:da:d3:
25:cb:b0:3b:88:0a:bb:51:8c:0d:a7:6b:c4:ae:ec:01:93:fd:
2b:73:cc:4c:f7:e1:b6:ec:2c:7f:86:42:45:e5:fb:a9:df:5c:
ee:9b:79:5a:25:3e:31:b3:e3:2b:c6:f5:06:26:8b:de:84:96:
2c:97:a5:f2:ce:3d:e4:9a:2a:a3:fd:2d:51:7e:61:c2:d4:f9:
52:17:d9:4e:2f:f8:8a:7c:66:b4:17:62:80:2d:8d:31:3c:e5:
6b:f1:c8:b1:39:65:9d:62:1c:b0:0e:84:61:cb:3d:f4:cd:3d:
12:dc:2e:22:5b:ed:52:e6:ca:88:c9:d5:f5:84:8a:a8:66:7a:
9f:89:f9:11:96:c8:d9:1f:dc:8f:5c:e0:97:90:ad:d5:b0:cf:
6a:1f:23:95:2b:c7:8e:1e:ae:6d:13:01:eb:db:dd:f5:7c:2e:
d6:5f:d8:df:ea:fa:73:26:40:49:a8:1d:30:5a:5d:b7:7d:9a:
cc:4e:60:f5:48:68:66:14:f4:be:ef:2b:e0:b9:47:54:11:aa:
ee:2d:5c:37:86:a0:25:13:90:aa:1f:79:3f:9d:97:34:72:41:
1b:10:a7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:03:29 2025 by rpki-client