Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer
File: BQFHuU3J1svowLDxrQwBg6YHfDQ.cer (raw, json)
Hash identifier: rSvgClVdzH+iHM9YL1xj0loZgKH5dTl80Hwt8O7p+Fs=
Subject key identifier: 05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C8BC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Jul 2026 13:43:09 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 131282
IP: 103.68.178.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 10:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182460 (0x2c8bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 30 13:43:09 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A91629AA, serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:0d:60:16:69:f4:2f:1b:e1:8e:72:c8:dc:
41:9c:ee:b9:23:6d:ef:7e:89:07:77:9f:87:65:40:
78:a7:6e:a1:b0:43:ed:44:38:a3:19:9b:41:93:90:
a9:f1:c4:8b:12:10:48:02:9e:be:9a:71:78:1d:7c:
7e:81:79:7e:67:ff:d4:c4:8f:b4:ab:18:24:3d:c9:
8b:66:ca:65:28:94:8e:2f:ab:49:77:30:39:ac:c3:
22:b3:5a:c7:57:c7:45:84:ac:7d:e0:78:99:65:88:
e8:b7:02:fe:93:2b:66:3e:d4:63:3d:f6:f7:83:3b:
35:73:55:1b:8c:70:e2:51:bd:f5:be:27:51:0e:af:
5e:f5:51:1f:ee:33:da:3f:ee:92:ad:9b:93:29:dd:
4e:2c:f3:00:f4:eb:89:27:14:1f:1c:a1:99:67:d0:
ae:31:cd:43:7d:60:fb:bf:b7:10:b5:8b:5d:2a:7b:
12:09:1d:ed:08:c5:25:23:f8:76:8f:09:46:a4:f0:
7e:1c:64:13:3d:32:34:60:f5:10:bc:76:ae:d7:80:
b4:44:11:4c:f6:8d:20:5d:7b:76:76:ec:1b:38:86:
ff:c6:ac:32:57:07:f8:fa:9f:57:78:e3:8c:5b:db:
62:f9:87:e3:db:c3:23:50:2b:c4:87:ba:36:05:7c:
88:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131282
sbgp-ipAddrBlock: critical
IPv4:
103.68.178.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:c1:0c:1a:e2:9d:04:1e:fe:6a:99:57:0b:3e:7f:f9:28:84:
94:f6:90:fe:af:41:b7:7c:16:ff:68:df:8d:96:99:94:a2:17:
77:db:85:cc:d8:5d:82:d3:3e:d2:f7:ea:91:a5:0d:c0:c1:07:
dd:6d:11:e9:01:16:89:1b:bf:65:83:a2:e6:1f:a2:01:a6:9b:
41:f1:fb:fa:20:23:3d:3e:14:7e:9a:cc:2b:5b:2a:52:4d:95:
62:8e:a8:4a:53:91:51:c8:16:89:93:96:90:0a:35:d8:21:fd:
1e:8d:e1:e8:d3:e4:0a:28:08:ca:d9:d4:cf:2d:2d:24:ee:bf:
b6:a7:e3:f7:31:dc:a3:3d:10:42:85:47:64:da:9d:ea:97:2c:
01:88:05:40:34:a0:6b:a1:45:2e:e2:8c:d3:1a:92:0b:c0:4c:
c6:3d:cf:47:f5:ea:ac:e3:3d:ba:30:e1:cf:fa:ad:06:6a:f5:
86:53:0a:6b:40:27:02:a5:67:47:4c:f0:7c:e5:69:08:4e:21:
5a:6c:39:50:ce:58:26:56:2f:4a:b7:e8:32:8a:be:11:9c:e8:
2d:87:ff:b8:6e:82:96:92:67:6a:a7:85:76:d2:a2:a2:35:8b:
f7:fd:95:73:d6:cf:0d:7f:04:04:1a:2d:74:29:a4:84:2a:89:
40:24:b3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:59 2026 by rpki-client