Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer
File: HN4SRMu7llQubIsJo9rBwbRDaNc.cer (raw, json)
Hash identifier: dUrNEtlQ9EgycyZQos9LlxAGHAi2rdbLkTELItzBKJQ=
Subject key identifier: 1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026D68
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 17 Oct 2025 10:18:54 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 137198
IP: 103.104.179.0/24
IP: 2001:df3:5700::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 08:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159080 (0x26d68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 17 10:18:54 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A918A498, serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ae:89:e3:d9:e3:d7:b8:fa:bd:ce:bc:fb:83:
34:ff:48:73:e1:28:41:76:21:80:24:89:f4:08:cc:
4b:6d:46:4a:6f:a4:ee:fe:74:b0:8a:27:dc:e3:27:
82:ba:0b:e8:12:44:2e:6e:67:65:2a:9e:75:86:b4:
fc:a3:71:c2:77:a9:9f:3a:de:00:5b:10:72:7e:37:
19:77:73:c8:2d:b9:8e:54:64:0c:96:11:52:aa:d1:
c3:4d:57:64:5d:ac:43:cb:ba:5e:89:e1:e3:a2:f7:
7c:4c:95:e0:cb:d4:2c:f3:ee:1e:e0:20:38:79:c6:
a3:74:d9:60:33:e9:60:11:33:dc:3e:53:5d:d5:81:
81:6b:77:64:6f:b9:72:c0:92:e7:99:21:57:df:44:
24:14:10:6b:82:2d:9d:86:4f:5f:5d:4d:bd:1e:96:
d5:34:4b:92:3a:51:08:d4:43:b0:57:ca:78:3e:88:
56:af:d4:08:33:43:73:9a:cc:35:47:89:2d:af:7e:
8b:cc:45:a5:8f:5d:86:78:57:c8:8d:dd:25:2d:35:
ab:8a:56:4f:6e:19:a6:c9:ce:01:a9:91:e8:f9:d3:
8b:87:97:2d:96:d9:3e:2b:4a:e1:44:b7:3e:57:9d:
e6:3a:7d:a9:73:8c:54:2f:29:df:e2:4a:20:d7:13:
18:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137198
sbgp-ipAddrBlock: critical
IPv4:
103.104.179.0/24
IPv6:
2001:df3:5700::/48
Signature Algorithm: sha256WithRSAEncryption
7f:db:36:56:5e:59:ff:af:d1:be:74:5d:13:60:c0:fb:8d:a9:
cd:b4:0e:df:c2:57:3b:4b:d8:db:0e:16:11:59:bd:ea:66:b6:
a3:4a:3b:82:50:65:84:6c:af:54:9d:e9:b1:f4:21:89:9c:5c:
ce:c8:dc:fe:4c:9f:9d:06:f4:68:47:98:fa:08:aa:53:ad:d3:
22:a7:aa:a9:5a:d8:8a:85:26:4e:36:c7:9e:65:d1:3c:50:ce:
32:eb:49:fe:08:df:c4:29:b4:c3:0d:c5:52:c4:bc:c2:fa:93:
13:62:e0:4a:42:23:97:f9:81:9c:bd:12:9c:c8:25:05:4e:f3:
e1:e4:74:40:57:87:8b:bf:df:fe:77:dc:8d:c5:6d:f7:af:e0:
8b:a4:6e:58:43:b8:5c:0c:ee:8b:dc:9d:f9:de:74:fd:ce:6d:
40:00:cb:f2:df:29:15:05:67:a3:6f:90:0c:24:98:1a:13:d1:
13:ae:d8:51:45:31:96:08:3d:34:b7:2f:fa:fc:cf:19:b3:68:
a6:2e:54:e0:ec:0c:2c:90:cd:3b:a4:ac:b5:af:95:19:dc:84:
b3:b5:3c:0a:11:5f:84:38:d6:b6:12:a1:bc:85:8e:1d:6a:47:
3d:b7:cf:0f:87:a5:3b:95:df:5f:d0:d9:63:98:d0:63:65:06:
73:d0:61:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:04:40 2025 by rpki-client