Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer
File: iB8oqx80yszxJe2ul-HgEGBYI0k.cer (raw, json)
Hash identifier: IW7oF6UAne3Cw7pN6q6DFKVSyLrNqWl7J0WVEa9iU5w=
Subject key identifier: 88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0264B3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 11 Sep 2025 04:23:45 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 138457
IP: 103.126.16.0/22
IP: 2404:240::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Sep 2025 18:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156851 (0x264b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 11 04:23:45 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91D342A, serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:7a:ed:89:0f:c9:87:2d:3d:30:69:59:37:
59:4d:c3:5b:07:71:41:de:06:a2:8c:5a:1d:66:2d:
dc:0d:14:b9:95:7b:1d:4e:e6:00:5f:75:29:e8:74:
58:4f:28:69:8f:be:8f:0f:eb:b4:59:e9:ff:e7:1b:
8c:0c:48:ba:76:cc:8e:e5:22:8b:cd:0b:21:c1:e9:
78:46:17:04:09:15:46:d2:ae:23:4d:b3:ad:47:99:
ec:0b:56:97:9a:ae:64:58:7c:f2:e5:e9:27:51:96:
5c:d6:20:cb:f5:84:0c:45:35:af:f6:3a:24:2b:0a:
a5:05:40:b9:52:e6:01:7c:bc:b2:0a:16:70:9a:a7:
c9:69:ca:d9:92:9b:ee:a3:ba:98:c9:e3:b7:a2:74:
08:29:33:80:bb:f1:c1:e7:f7:ab:f5:13:f3:93:ff:
8d:72:aa:d9:74:ce:37:8d:18:bb:e3:2e:68:1f:c9:
62:26:79:d1:fd:1f:f3:65:68:4f:1f:df:42:19:bb:
73:96:08:2e:b7:6a:ca:e5:2a:5d:9f:87:9b:0e:80:
89:07:f5:c4:8d:a1:e4:3e:ce:0b:01:69:32:ff:87:
d4:a8:88:84:c2:16:b2:3c:2f:76:95:35:ae:83:01:
e6:8f:0d:9b:18:1b:4f:f3:f1:5d:49:a5:3b:7f:8a:
5e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138457
sbgp-ipAddrBlock: critical
IPv4:
103.126.16.0/22
IPv6:
2404:240::/32
Signature Algorithm: sha256WithRSAEncryption
bc:2f:66:b3:30:1e:87:b4:01:a4:3e:84:ec:d4:12:dc:4d:fe:
dc:6d:4c:b9:28:33:09:1d:21:0e:16:54:de:0f:58:06:b2:26:
0b:70:b5:63:d0:fe:17:b2:1b:8c:52:85:d3:79:bf:93:d2:2d:
b8:af:4b:06:4f:04:ef:7c:19:bf:40:0b:3b:09:0d:46:18:99:
3b:e4:20:9e:ca:d1:8c:0f:c6:26:4e:c4:76:6a:e1:94:14:04:
7e:fa:fa:91:e6:9a:c9:4b:ce:ff:5d:87:1d:28:7c:47:86:37:
5a:94:e0:5e:db:a9:20:b7:be:f7:35:85:29:ad:30:1b:d8:8e:
4c:fb:92:c1:c2:42:29:d9:80:6f:23:d9:94:79:81:7d:12:78:
9c:c3:d9:64:13:0b:d1:f9:1c:83:dc:d3:ac:a7:44:cd:11:7b:
04:5c:7b:a0:98:5e:24:c6:d9:06:f1:3e:a2:ca:fc:3f:b2:39:
4c:04:43:b9:e6:31:a3:8d:68:e8:a7:59:54:2f:4c:1b:4d:8e:
89:5c:80:80:3a:5d:ac:84:a0:52:b3:83:07:75:05:25:0e:1d:
35:1a:64:68:e7:d9:f6:d4:2d:52:b4:cc:50:6c:93:78:36:ca:
3d:ff:f1:04:99:2b:3e:a1:04:50:e6:99:29:73:eb:76:7f:9f:
c5:64:cf:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:20:23 2025 by rpki-client