Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer
File: 7ulOOvQOrIyjbcMuSeREbs-zNQU.cer (raw, json)
Hash identifier: 3Zpl4oebELNetayWU5NRGcvwa8jbZRshEfGZ/BumgPo=
Subject key identifier: EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026E46
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Oct 2025 15:40:36 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 138403
IP: 103.124.180.0/23
IP: 2001:df6:3840::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 16:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159302 (0x26e46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 21 15:40:36 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A9161FF7, serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:45:c7:ed:69:cb:58:a2:cc:f4:71:33:ab:06:
a5:32:4d:e7:1d:b5:77:f9:40:27:d8:38:13:18:a9:
59:bc:f8:0d:fa:59:2b:61:4d:89:4d:96:3b:44:e0:
e5:c2:9a:c6:06:f6:b0:a5:90:9a:14:84:7b:9f:08:
b1:84:51:7a:4f:f6:48:4c:8e:fa:de:40:8a:61:a9:
49:64:2f:d1:5b:79:e0:ba:a0:01:0c:fc:d4:b2:4f:
87:d9:fe:9e:1e:b4:99:ae:52:28:c0:80:fb:10:2e:
26:db:5c:18:e5:1b:bd:07:8f:7c:79:24:70:17:38:
f3:d1:2a:9f:dc:4c:90:5e:e9:1a:2f:7d:b7:cc:c7:
17:14:c3:67:6e:e6:07:9f:d4:c9:ed:8a:c9:2e:47:
45:45:a4:c8:f3:6a:8e:68:0a:34:db:9e:00:5e:b5:
75:9f:6e:91:93:29:b6:5b:1b:9f:50:7a:0e:30:e6:
27:e4:67:b2:83:fb:27:e5:c8:f0:3c:92:6e:3d:28:
9a:d5:f7:38:d1:2b:df:3f:93:7d:5c:dc:47:b5:14:
5a:f0:65:fe:1c:49:41:f2:0c:dc:9c:17:be:9b:19:
5b:78:f8:45:27:b3:a0:41:19:67:85:38:78:fd:e0:
ea:8f:6c:7d:1f:2a:82:b8:dd:7f:b8:08:c4:55:dc:
84:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138403
sbgp-ipAddrBlock: critical
IPv4:
103.124.180.0/23
IPv6:
2001:df6:3840::/48
Signature Algorithm: sha256WithRSAEncryption
81:0d:b9:19:7c:4b:42:3e:f6:73:4f:3d:ea:0d:bf:97:31:fd:
76:c3:b8:81:f2:84:7b:1b:f8:99:89:6a:79:e7:26:c4:f7:83:
31:72:60:d5:8d:52:96:e1:69:1b:64:54:27:18:e8:8d:79:3a:
08:26:1a:93:2f:4e:02:6d:36:95:0a:bb:4a:9f:f9:ef:de:bb:
cd:7e:0e:c2:6a:91:f5:0a:81:57:b6:bb:20:94:ed:88:97:44:
91:06:5e:d7:85:83:1a:ea:34:72:6d:38:3e:ea:ed:ca:3b:34:
a8:fc:8a:50:ec:be:04:bd:5d:ea:71:e2:6f:cb:2b:0b:55:39:
3f:a9:82:40:81:76:25:7b:8c:20:b9:d9:a9:94:85:ba:ae:6b:
21:9d:ec:7a:6c:b4:ef:0a:8f:65:74:44:cf:65:f2:8f:e2:75:
b0:b4:72:7b:55:a5:f9:ec:65:ff:5c:06:1e:b6:ab:a8:2c:5e:
7c:07:f7:4d:50:ca:23:e1:d3:ef:e6:65:84:b4:50:7d:15:4c:
af:56:9d:f6:f0:fa:fb:4b:a6:1d:83:b6:bc:68:43:d9:c7:57:
67:3f:05:76:6b:20:39:5c:3d:dd:30:3a:8e:e2:ef:c4:cc:62:
c2:4a:3b:b7:26:20:57:b3:e1:05:19:f7:b3:1d:80:9c:73:9c:
7e:77:8c:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:11:24 2025 by rpki-client