Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer
File: h6VQYbdfHcLFxbuH0omOgzB9hw8.cer (raw, json)
Hash identifier: a24m/xzqfVChFVJVq2DiGro0ltqr2dFtc5i4ms1nFIc=
Subject key identifier: 87:A5:50:61:B7:5F:1D:C2:C5:C5:BB:87:D2:89:8E:83:30:7D:87:0F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025F92
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 26 Aug 2025 00:46:12 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 59381
IP: 103.235.176.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Sep 2025 19:44:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155538 (0x25f92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 26 00:46:12 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91DD42F, serialNumber=87A55061B75F1DC2C5C5BB87D2898E83307D870F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:c0:63:96:90:2c:b0:e6:84:99:02:96:07:
b5:45:11:7b:b6:2b:cc:a9:97:56:1b:20:a1:23:1b:
68:0e:72:d4:48:56:4f:06:67:3f:a2:90:08:14:70:
13:bc:c5:3e:38:4a:80:c8:77:50:a6:5b:8d:86:28:
03:b6:01:89:38:2e:2c:2c:19:26:73:81:6f:a1:4c:
bb:4c:60:50:b4:89:ac:d5:b4:47:e7:83:9c:4d:47:
ad:66:92:15:d8:ca:4e:a9:dc:b4:ff:44:d5:59:f1:
bc:11:9d:fe:d1:3a:cb:f6:1f:1f:d8:5b:c3:2a:14:
0e:47:a2:68:63:f9:94:59:43:c9:9d:f9:6c:9c:20:
7c:c6:82:d2:18:a3:30:d0:8c:9c:80:cd:22:67:75:
d9:cd:b7:36:3f:70:ed:9e:c6:02:00:f4:9f:05:7c:
16:ec:cf:16:a2:05:ab:89:79:29:e8:8e:1b:9b:0e:
16:41:56:47:00:fa:cd:fa:b8:04:61:76:7b:06:90:
25:ae:d9:7d:5e:2c:c3:8f:72:d6:cd:98:f1:00:18:
39:62:f5:70:ed:c7:46:b5:f0:87:f2:46:4e:2c:72:
e3:ff:45:ce:d6:ad:e7:9d:a7:a1:70:d1:9b:4d:b3:
80:47:01:d9:38:b9:5e:09:c7:37:01:c7:04:27:28:
61:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A5:50:61:B7:5F:1D:C2:C5:C5:BB:87:D2:89:8E:83:30:7D:87:0F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59381
sbgp-ipAddrBlock: critical
IPv4:
103.235.176.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:a1:dd:a2:58:6d:f1:28:58:a1:d0:c9:db:9b:74:44:30:d5:
76:e3:cf:6b:0f:6f:52:5e:f7:1c:b0:d8:b1:be:29:1d:8b:8c:
55:af:c7:a1:d8:18:d8:b2:99:8f:28:cc:0a:25:cb:ab:e3:b0:
09:79:af:a7:10:0b:cb:17:1d:8e:f2:53:88:e2:43:93:58:0d:
26:96:90:13:91:c9:3f:66:e7:7a:b9:cf:be:da:55:4a:8c:4e:
34:38:90:46:02:95:63:93:7d:a1:9b:00:91:88:dd:28:83:fc:
89:8c:90:b6:d1:7b:55:3c:ef:98:1b:45:5b:6c:90:78:c7:17:
1f:83:cd:ab:14:94:0a:07:77:82:08:7f:bd:c3:00:fa:40:25:
c4:43:e8:ed:6f:92:fa:d4:c1:95:23:1d:f3:d2:ea:dd:41:8d:
b4:50:9f:72:7d:a5:64:29:b9:cb:5e:01:14:e3:85:a9:f0:b4:
1a:bd:d7:b8:24:3d:ed:97:f5:da:25:cf:64:0d:1b:1d:b0:34:
c5:dd:e2:ac:2a:38:06:2d:b1:24:21:74:03:85:85:c3:7f:5f:
72:41:28:fc:9c:d2:37:31:0e:49:41:ed:f6:d0:f9:19:55:79:
03:95:81:28:2f:57:12:e8:ec:80:1e:fd:ac:2e:5f:b0:24:e2:
39:49:01:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:42:59 2025 by rpki-client