Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer
File: 7ulOOvQOrIyjbcMuSeREbs-zNQU.cer (raw, json)
Hash identifier: yMYSrrS3RgJcDzgpa8RcS8SINS8c4ieJjvyTQBq00lM=
Subject key identifier: EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026CF6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 16 Oct 2025 03:42:57 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 138403
IP: 103.124.180.0/23
IP: 2001:df6:3840::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158966 (0x26cf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 16 03:42:57 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A9161FF7, serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:45:c7:ed:69:cb:58:a2:cc:f4:71:33:ab:06:
a5:32:4d:e7:1d:b5:77:f9:40:27:d8:38:13:18:a9:
59:bc:f8:0d:fa:59:2b:61:4d:89:4d:96:3b:44:e0:
e5:c2:9a:c6:06:f6:b0:a5:90:9a:14:84:7b:9f:08:
b1:84:51:7a:4f:f6:48:4c:8e:fa:de:40:8a:61:a9:
49:64:2f:d1:5b:79:e0:ba:a0:01:0c:fc:d4:b2:4f:
87:d9:fe:9e:1e:b4:99:ae:52:28:c0:80:fb:10:2e:
26:db:5c:18:e5:1b:bd:07:8f:7c:79:24:70:17:38:
f3:d1:2a:9f:dc:4c:90:5e:e9:1a:2f:7d:b7:cc:c7:
17:14:c3:67:6e:e6:07:9f:d4:c9:ed:8a:c9:2e:47:
45:45:a4:c8:f3:6a:8e:68:0a:34:db:9e:00:5e:b5:
75:9f:6e:91:93:29:b6:5b:1b:9f:50:7a:0e:30:e6:
27:e4:67:b2:83:fb:27:e5:c8:f0:3c:92:6e:3d:28:
9a:d5:f7:38:d1:2b:df:3f:93:7d:5c:dc:47:b5:14:
5a:f0:65:fe:1c:49:41:f2:0c:dc:9c:17:be:9b:19:
5b:78:f8:45:27:b3:a0:41:19:67:85:38:78:fd:e0:
ea:8f:6c:7d:1f:2a:82:b8:dd:7f:b8:08:c4:55:dc:
84:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138403
sbgp-ipAddrBlock: critical
IPv4:
103.124.180.0/23
IPv6:
2001:df6:3840::/48
Signature Algorithm: sha256WithRSAEncryption
87:66:5d:04:78:e3:cf:ab:b8:95:0f:b9:1f:f4:11:25:6d:c8:
1a:c0:a3:61:64:90:d0:54:0b:97:a3:e7:41:22:4c:77:bb:88:
d3:a1:88:19:fa:e0:a9:d0:e6:02:42:86:0f:d3:2f:42:dd:9e:
a9:2c:c6:42:a2:42:32:84:01:43:7b:92:6b:7a:e7:38:a9:f5:
a3:57:ad:4c:5f:9c:68:31:20:2c:10:a2:3c:db:74:33:63:84:
98:26:1b:65:3e:a1:29:c8:41:76:3f:4f:6c:39:8a:16:36:11:
86:fd:e6:c3:6f:c4:5c:1d:ec:8e:3e:12:a5:b5:bb:19:d5:50:
29:d5:9b:19:c8:b9:fa:dc:95:7c:9c:cd:7f:22:84:16:79:b8:
48:48:d6:16:f2:29:ae:ad:3e:4f:28:d9:01:15:f7:8e:38:69:
1d:ca:63:6d:68:64:5a:2b:68:1b:bc:c6:90:f5:fd:dc:4e:17:
64:40:28:c7:2a:45:35:c9:c7:01:18:36:70:67:5c:90:4f:e0:
4a:35:96:ec:b7:e7:64:a5:57:a9:1d:ea:dc:ae:e5:aa:f3:58:
55:62:c5:9a:8c:5f:c7:25:23:c0:84:57:68:88:67:0a:0d:9c:
74:d8:7b:f1:71:60:70:d2:18:5e:c1:1c:6e:fe:f2:56:72:1a:
dd:7f:ef:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:16:03 2025 by rpki-client