Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehJP7rfFzzH0SY_k2MEdBJtDjY0.cer
File: ehJP7rfFzzH0SY_k2MEdBJtDjY0.cer (raw, json)
Hash identifier: LiLDJeDJ3YxKbD+UmED3hZPrT7KyParGBSEcJx8tgAc=
Subject key identifier: 7A:12:4F:EE:B7:C5:CF:31:F4:49:8F:E4:D8:C1:1D:04:9B:43:8D:8D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02D863
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911F4E6/49346B18B89411F19679F8DA5E11F970/ehJP7rfFzzH0SY_k2MEdBJtDjY0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911F4E6/49346B18B89411F19679F8DA5E11F970/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 25 Sep 2026 03:50:48 +0000
Certificate not after: Sun 31 Oct 2027 00:00:00 +0000
Subordinate resources: AS: 133019
IP: 103.251.15.0/24
IP: 2001:df0:7000::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 03:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186467 (0x2d863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 25 03:50:48 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=A911F4E6, serialNumber=7A124FEEB7C5CF31F4498FE4D8C11D049B438D8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:05:e3:58:45:40:8b:4c:e6:41:5b:40:12:
34:12:e0:fc:b7:5a:f5:a9:50:de:24:08:db:56:4e:
3f:9b:2f:c5:a2:7b:4f:3e:1a:1a:d0:e1:d6:8d:7c:
9c:4b:6c:32:c6:73:bf:86:fa:86:f5:de:38:47:b3:
c0:3b:e2:16:08:04:ff:3a:a3:55:36:01:3b:35:b6:
43:6d:3a:82:6c:94:af:da:79:77:7d:a7:8e:c5:e1:
74:64:d6:bf:a5:73:6d:a4:f2:c4:b7:9b:6c:94:0a:
d6:48:13:d4:32:f2:9d:ba:f1:1c:90:aa:ef:3c:fb:
87:93:ed:99:ef:0a:9f:3d:86:d6:aa:60:9d:ab:8d:
53:c8:cd:2d:4c:b5:06:ac:24:82:15:e3:bb:3a:ed:
a6:e3:eb:80:1c:66:df:73:4d:5b:6a:db:0e:c2:e2:
f1:ce:6b:a0:29:4b:96:c7:d8:82:d6:4d:9d:05:a7:
21:eb:ea:fb:05:56:52:3b:a3:21:53:12:ef:5a:51:
19:10:32:99:1f:76:4b:44:b2:07:0d:48:8f:71:4f:
9c:00:d1:d7:e3:29:31:cd:05:81:9d:50:db:d0:c9:
2b:83:d9:3b:d8:5c:12:d5:2a:4b:dd:eb:58:b1:55:
1f:05:3e:0b:85:69:8e:b6:1a:5b:b8:2b:5b:ba:32:
c4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:12:4F:EE:B7:C5:CF:31:F4:49:8F:E4:D8:C1:1D:04:9B:43:8D:8D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911F4E6/49346B18B89411F19679F8DA5E11F970/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911F4E6/49346B18B89411F19679F8DA5E11F970/ehJP7rfFzzH0SY_k2MEdBJtDjY0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133019
sbgp-ipAddrBlock: critical
IPv4:
103.251.15.0/24
IPv6:
2001:df0:7000::/48
Signature Algorithm: sha256WithRSAEncryption
08:a1:ed:68:88:7a:03:cf:b1:47:5d:8d:8b:48:54:b9:d7:6f:
f9:a2:85:d2:cf:98:dd:71:c7:f7:ce:0e:76:6d:a4:86:56:96:
ce:9f:59:1c:db:4a:22:95:7b:e3:1f:e9:d1:e1:0f:d1:e1:cb:
fc:ca:5c:de:f3:4b:28:a3:f7:62:23:52:2e:60:9e:4f:ca:4c:
ad:80:67:17:3c:e9:f5:3d:5b:ee:37:f2:9f:a7:71:2d:48:b9:
55:41:b0:16:41:09:52:30:18:c4:bc:74:21:f5:b9:f4:c7:13:
1b:6e:af:0e:d5:10:d0:64:3a:d1:d0:96:4c:9d:1c:a5:a2:a8:
09:e3:d3:5f:93:5f:7c:57:c0:0e:12:c4:e8:ed:96:01:e4:72:
d8:f7:cb:d6:e9:38:1f:c4:af:a4:32:66:73:44:98:26:25:5c:
6e:a4:e2:53:77:f5:e5:4f:fa:ca:d4:77:59:34:54:67:04:3b:
e2:ed:c7:4d:b7:36:2c:d5:67:a2:b2:18:9c:d1:4c:65:2a:77:
f1:03:93:fd:9f:8c:d8:16:c2:18:fd:93:d1:e0:d6:88:d0:90:
6b:07:fd:17:db:df:0c:41:1e:ed:d2:63:bb:fc:88:63:6c:a5:
12:27:15:65:c7:94:d8:98:dd:13:f8:7c:e1:d5:01:b1:10:fe:
d7:8e:0c:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 8 09:25:51 2026 by rpki-client