Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer
File: K7fm9k6JPZEwSosliGA1DWdQVK0.cer (raw, json)
Hash identifier: qvxzbgvI0NDffQuoKD6kzdCt1Nqsf72jkOKI0Ss3q1U=
Subject key identifier: 2B:B7:E6:F6:4E:89:3D:91:30:4A:8B:25:88:60:35:0D:67:50:54:AD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025F4B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 25 Aug 2025 05:05:10 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 134460
IP: 103.158.150.0/23
IP: 2001:df5:5780::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Sep 2025 12:20:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155467 (0x25f4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 25 05:05:10 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91F08D9, serialNumber=2BB7E6F64E893D91304A8B258860350D675054AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:9a:e6:98:42:be:96:06:20:3a:7c:b9:18:
01:15:16:d1:fe:19:68:5c:71:38:36:08:72:f0:94:
17:07:ae:74:ab:63:b4:21:76:80:d3:8d:1e:b5:d7:
59:26:87:34:8a:fc:ab:c4:63:8b:d7:ae:f9:7b:c4:
52:43:2d:e2:e7:3c:68:c4:87:b1:9b:36:b6:b1:a2:
bd:7f:44:f4:e2:af:24:d5:ad:67:19:91:23:db:df:
42:80:67:ae:5b:6f:89:41:19:85:2f:ff:a7:a9:09:
35:13:4a:42:3d:85:38:bd:6d:00:e3:e1:63:a6:04:
5b:d0:94:b7:24:71:be:d2:1c:25:e9:c1:6c:d2:b5:
18:f0:72:80:4b:bd:c6:a4:fd:1a:32:dc:0e:95:e2:
1a:50:3c:84:a4:4e:6e:e1:c2:b8:68:76:58:cf:66:
80:0e:8c:96:76:40:66:8c:cc:db:34:9e:50:fb:64:
39:52:d8:4d:5f:ea:97:08:11:f3:49:17:a1:a2:9a:
35:41:39:f8:ce:5f:45:03:46:c9:24:37:a2:ed:fe:
fc:50:e0:cd:0e:51:9e:72:32:06:af:3c:bd:e4:a4:
1b:b1:69:7a:74:8e:fe:9b:7f:bb:13:b2:0a:14:d1:
f7:5e:1d:b9:8b:63:1f:fd:b5:f7:3d:5b:09:a3:94:
9a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B7:E6:F6:4E:89:3D:91:30:4A:8B:25:88:60:35:0D:67:50:54:AD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134460
sbgp-ipAddrBlock: critical
IPv4:
103.158.150.0/23
IPv6:
2001:df5:5780::/48
Signature Algorithm: sha256WithRSAEncryption
5d:b8:06:69:8d:3e:54:9a:9b:ce:c1:e4:e4:f2:17:a8:e5:83:
8f:08:e5:e8:ab:af:b6:9b:9d:e4:a2:fa:e9:0a:e1:08:18:f1:
ed:44:86:7c:dd:84:80:a7:bf:b3:ca:b9:e1:0d:7e:a7:51:0e:
26:21:82:38:07:00:84:4a:2b:7c:7a:09:9a:b5:32:58:e4:fe:
53:3a:e5:92:80:72:83:24:c6:b2:c9:af:68:11:18:27:af:43:
19:42:ba:59:c9:f7:a4:40:5b:47:0c:37:1a:de:86:59:a6:48:
e3:e3:13:42:94:ea:ca:9e:52:83:74:ed:a1:4c:d2:c8:c9:bf:
bc:45:10:ba:b1:2b:d3:ff:a7:88:6b:ee:16:1f:54:b6:f1:ba:
20:de:7a:2b:4f:c6:48:37:f0:07:45:0b:a1:67:72:05:dc:38:
4b:d0:1c:c7:a3:1b:1f:d5:52:1c:60:df:26:89:37:ca:e3:3a:
14:75:25:ae:e4:98:ff:df:dd:db:a0:f2:4b:5b:ac:5d:56:f6:
27:73:54:a9:2a:6a:e0:75:c4:4b:2a:29:66:e3:85:ef:e8:7e:
71:06:e7:92:cc:d5:b9:81:a3:79:e5:9a:8d:2a:1c:e0:4b:24:
77:22:3f:d2:b9:ad:28:6a:b0:95:a7:08:fe:fc:a8:5f:40:f3:
0d:12:9f:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 9 13:36:53 2025 by rpki-client