Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer
File: BQFHuU3J1svowLDxrQwBg6YHfDQ.cer (raw, json)
Hash identifier: es6vHVJoVjHd5atxYSvgOmzo5/rTRdzcOh2z51DmFCI=
Subject key identifier: 05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025630
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 17 Jul 2025 05:25:28 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 131282
IP: 103.68.178.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 04:28:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153136 (0x25630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 17 05:25:28 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91629AA, serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:0d:60:16:69:f4:2f:1b:e1:8e:72:c8:dc:
41:9c:ee:b9:23:6d:ef:7e:89:07:77:9f:87:65:40:
78:a7:6e:a1:b0:43:ed:44:38:a3:19:9b:41:93:90:
a9:f1:c4:8b:12:10:48:02:9e:be:9a:71:78:1d:7c:
7e:81:79:7e:67:ff:d4:c4:8f:b4:ab:18:24:3d:c9:
8b:66:ca:65:28:94:8e:2f:ab:49:77:30:39:ac:c3:
22:b3:5a:c7:57:c7:45:84:ac:7d:e0:78:99:65:88:
e8:b7:02:fe:93:2b:66:3e:d4:63:3d:f6:f7:83:3b:
35:73:55:1b:8c:70:e2:51:bd:f5:be:27:51:0e:af:
5e:f5:51:1f:ee:33:da:3f:ee:92:ad:9b:93:29:dd:
4e:2c:f3:00:f4:eb:89:27:14:1f:1c:a1:99:67:d0:
ae:31:cd:43:7d:60:fb:bf:b7:10:b5:8b:5d:2a:7b:
12:09:1d:ed:08:c5:25:23:f8:76:8f:09:46:a4:f0:
7e:1c:64:13:3d:32:34:60:f5:10:bc:76:ae:d7:80:
b4:44:11:4c:f6:8d:20:5d:7b:76:76:ec:1b:38:86:
ff:c6:ac:32:57:07:f8:fa:9f:57:78:e3:8c:5b:db:
62:f9:87:e3:db:c3:23:50:2b:c4:87:ba:36:05:7c:
88:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131282
sbgp-ipAddrBlock: critical
IPv4:
103.68.178.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:7c:43:70:20:63:e8:2f:2e:f6:7d:71:b7:77:b9:ad:2f:52:
88:05:64:e0:5a:2a:72:1f:06:72:11:07:89:ab:a1:58:bc:28:
b0:2c:9a:9a:69:67:a4:bd:0f:8c:f4:72:9f:cc:61:ba:19:aa:
8a:2f:23:76:76:4d:f2:45:f6:0f:f1:a5:65:90:f4:0e:72:65:
7b:04:8c:36:9e:e7:ad:19:37:94:95:74:8a:d8:fe:b5:26:cd:
cb:de:76:bf:94:ef:46:fd:63:e9:d1:bf:e9:ff:82:6c:d4:f9:
65:96:d4:7e:12:d8:ee:9a:b8:a1:d0:0e:fe:0a:cc:04:37:52:
5d:84:25:2f:16:b0:0e:03:1a:37:dc:1c:61:18:76:36:06:16:
ca:17:ed:89:f7:d7:11:ae:00:8c:9b:87:0a:a8:67:17:3c:ef:
ef:ff:cd:ad:17:86:b2:56:77:be:bd:2f:25:4f:80:21:9d:97:
33:33:5c:b2:a8:9e:35:81:5e:16:36:cd:b8:f5:d7:fe:6d:c3:
b2:46:d6:83:00:0a:70:2c:c4:dc:5a:2b:9a:68:7c:5d:e6:31:
99:49:5a:62:b2:40:ee:9f:68:6c:74:88:12:b1:51:40:8b:9e:
d5:89:05:d6:9f:7b:fc:49:b2:cb:c2:be:59:d5:95:10:60:6e:
57:32:f1:d0
-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIDAlYwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDcxNzA1MjUyOFoXDTI2MDkzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjI5QUExMTAvBgNVBAUTKDA1MDE0N0I5NERDOUQ2Q0JFOEMwQjBG
MUFEMEMwMTgzQTYwNzdDMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1tw1gFmn0LxvhjnLI3EGc7rkjbe9+iQd3n4dlQHinbqGwQ+1EOKMZm0GTkKnx
xIsSEEgCnr6acXgdfH6BeX5n/9TEj7SrGCQ9yYtmymUolI4vq0l3MDmswyKzWsdX
x0WErH3geJlliOi3Av6TK2Y+1GM99veDOzVzVRuMcOJRvfW+J1EOr171UR/uM9o/
7pKtm5Mp3U4s8wD064knFB8coZln0K4xzUN9YPu/txC1i10qexIJHe0IxSUj+HaP
CUak8H4cZBM9MjRg9RC8dq7XgLREEUz2jSBde3Z27Bs4hv/GrDJXB/j6n1d444xb
22L5h+PbwyNQK8SHujYFfIiFAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUBQFHuU3J
1svowLDxrQwBg6YHfDQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTYyOUFBLzVGMDY5M0Y0RTc0OTExRUVCQzUyNkYyOUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2MjlBQS81RjA2OTNGNEU3NDkxMUVFQkM1MjZGMjlDNEY5QUUwMi9CUUZIdVUz
SjFzdm93TER4clF3Qmc2WUhmRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgDSMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0SyMA0GCSqG
SIb3DQEBCwUAA4IBAQArfENwIGPoLy72fXG3d7mtL1KIBWTgWipyHwZyEQeJq6FY
vCiwLJqaaWekvQ+M9HKfzGG6GaqKLyN2dk3yRfYP8aVlkPQOcmV7BIw2nuetGTeU
lXSK2P61Js3L3na/lO9G/WPp0b/p/4Js1PllltR+Etjumrih0A7+CswEN1JdhCUv
FrAOAxo33BxhGHY2BhbKF+2J99cRrgCMm4cKqGcXPO/v/82tF4ayVne+vS8lT4Ah
nZczM1yyqJ41gV4WNs249df+bcOyRtaDAApwLMTcWiuaaHxd5jGZSVpiskDun2hs
dIgSsVFAi57ViQXWn3v8SbLLwr5Z1ZUQYG5XMvHQ
-----END CERTIFICATE-----
Generated at Sun Jul 20 07:33:16 2025 by rpki-client