Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer
File: taHQH3ui3UVMy-zTGGzhR6_-G64.cer (raw, json)
Hash identifier: GAkujgpL4iNG7rd0SktCrEr+sNAF4JXi2LECRKfyLkE=
Subject key identifier: B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02728A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Nov 2025 17:07:33 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 7467
IP: 103.150.39.0/24
IP: 202.134.50.0/24
IP: 2001:df0:be::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 17:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160394 (0x2728a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 3 17:07:33 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A9177EF0, serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:d4:05:c2:c6:8d:43:23:03:c2:32:d5:93:
f3:49:2f:12:51:19:d5:83:ce:96:7b:4e:bb:42:2c:
d5:72:1c:3b:62:48:14:ff:2f:62:c5:45:57:3a:4d:
24:7e:72:47:d5:02:07:45:99:0a:7a:2d:3a:f7:9b:
99:11:06:7f:1e:df:5d:3c:ee:d5:47:2f:22:3a:08:
1e:19:cb:d7:94:aa:51:f4:37:a5:31:d0:37:ca:fb:
fe:05:ed:da:8d:84:43:65:a0:da:cb:0e:b3:bc:b6:
a8:04:10:0f:28:79:b4:75:c3:12:d2:9e:a9:d4:2d:
1d:a3:26:10:23:67:f1:18:aa:b7:a0:00:41:a4:63:
db:0f:de:ea:95:ee:64:31:7c:ec:e4:cf:2f:1c:b6:
e4:69:fc:6b:21:22:78:f6:5a:f3:82:68:7f:98:61:
e5:ac:b0:fa:86:cc:10:15:ae:94:9b:b5:f9:13:0a:
2f:e1:2d:22:15:ff:5f:fe:e5:6c:c3:b3:d6:1d:a5:
c3:c6:6c:5e:3d:69:99:5b:fa:44:d7:d4:a1:c0:2c:
78:51:1f:62:7c:05:f2:da:91:60:69:74:7c:dc:7c:
17:9f:ad:d0:fd:27:10:e3:00:5b:2f:42:4f:34:87:
4d:3b:e9:0f:f8:c3:1e:fd:16:e5:69:12:36:7d:54:
7c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7467
sbgp-ipAddrBlock: critical
IPv4:
103.150.39.0/24
202.134.50.0/24
IPv6:
2001:df0:be::/48
Signature Algorithm: sha256WithRSAEncryption
6d:38:79:5e:7f:75:18:de:8a:c1:4f:40:60:22:9d:9c:53:57:
d7:05:9b:3f:3c:76:0d:0e:98:ed:b2:c7:7d:56:5f:f2:e1:2f:
39:4d:8f:68:84:f9:98:fc:b0:06:a3:f3:47:51:38:46:6c:69:
e4:d6:d5:68:a0:b7:d1:75:8c:1f:de:a6:b0:18:ea:55:70:97:
30:56:7e:f1:58:de:f2:98:82:56:32:00:1a:3e:c1:70:a5:f2:
fd:af:2b:8c:13:56:d5:52:26:c2:7a:0a:b1:a2:d3:68:04:fe:
65:3b:51:55:59:03:9d:95:9f:af:81:3e:00:2d:98:9c:65:e4:
4b:0c:df:78:52:c3:cf:55:42:87:a8:44:a7:ba:2b:e9:0e:5c:
7f:87:17:b2:b6:4c:f9:54:15:e4:99:60:bd:f6:19:30:c5:0f:
13:1d:2e:33:71:46:7b:a5:67:65:e9:28:4c:71:7f:a8:49:4d:
a8:4d:1d:5b:26:2a:b1:77:6d:a4:a8:58:8c:77:a5:1b:fa:8d:
7f:b4:c8:5d:03:a4:64:37:df:06:d5:9c:74:fd:5b:62:f6:8b:
d2:70:40:73:3b:9e:20:ea:a5:88:8c:c3:af:dc:aa:71:f5:c0:
ae:4b:3a:5f:82:dd:ba:e1:bb:4e:1e:d4:8c:26:d9:f4:58:81:
6c:1c:47:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:29:44 2025 by rpki-client