Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
File: f95kLEQhft58x2dxm6Z9A20X0Es.cer (raw, json)
Hash identifier: RnZlIbj9sy01ZuORvuRGivmDhUg5ihfoHjVREEUWTXM=
Subject key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025620
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 16 Jul 2025 16:35:32 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 132227
IP: 103.214.248.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 09:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153120 (0x25620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 16 16:35:32 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A9189883, serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:2e:23:37:19:e0:13:a1:7b:80:a7:c9:4b:
89:ab:66:a8:e8:99:50:c7:23:d8:da:fc:51:3d:a7:
9d:10:9d:9d:cb:3a:08:28:55:fd:8f:87:30:ae:b6:
11:5c:74:66:a6:99:de:89:bc:cc:40:e6:17:98:c9:
e0:8c:4a:a5:d5:4e:e3:67:87:c9:85:2f:57:3e:ed:
80:ac:98:b9:1d:8e:23:bb:d5:b3:13:d3:84:4e:37:
16:56:42:36:6a:95:a9:03:2e:6a:8d:99:3c:8d:b5:
55:97:52:f4:e6:42:cd:88:43:ca:4e:fa:f5:16:e4:
6b:28:ad:48:72:61:13:ca:d0:28:6d:ab:b2:e2:ff:
ed:28:01:87:01:42:68:fb:d1:0b:f6:08:38:03:48:
1e:d4:9f:6d:a6:8c:56:1e:1d:17:70:83:fe:96:8a:
86:df:aa:ee:58:0b:81:ed:dc:00:d1:70:a2:07:04:
9f:17:10:96:eb:59:df:5b:49:2e:40:08:2d:54:13:
54:50:53:51:84:a3:fe:43:db:ff:79:b0:91:53:3b:
b1:d4:cc:1a:5c:16:6d:f5:2e:fa:eb:e2:0b:09:11:
51:53:23:a6:e2:db:11:94:ba:b2:8c:68:f5:2d:12:
73:8c:ad:94:87:50:a8:86:6c:e3:2a:44:16:88:cd:
88:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132227
sbgp-ipAddrBlock: critical
IPv4:
103.214.248.0/23
Signature Algorithm: sha256WithRSAEncryption
06:3a:b3:1a:e3:ce:93:a8:7d:81:fb:e4:8b:38:8d:46:2e:fc:
77:33:60:d6:6f:a9:43:54:9c:5b:45:48:ac:5d:d3:f7:e6:2a:
56:47:7b:84:d6:87:30:3a:1a:c8:7c:b8:aa:8a:ee:31:91:e2:
60:04:b7:27:71:9a:e4:89:9b:1c:11:6e:49:b9:10:83:d3:29:
e2:f0:31:43:7c:80:a7:e4:91:1d:bf:71:a3:87:d5:37:50:cc:
97:bc:4f:6c:6d:2b:5d:cc:fd:0f:1d:4a:83:3a:b2:7e:f0:ea:
46:02:25:06:d4:33:fc:6b:ae:db:b4:bf:db:c0:9b:15:29:e2:
eb:e9:c1:8f:de:2d:21:76:59:15:82:90:6e:a2:e6:bb:54:e5:
b5:cd:d7:d3:38:da:6a:bc:9c:45:4d:6a:c1:ea:8c:2e:54:dc:
90:6a:7e:bf:64:7e:79:da:c9:12:44:c0:2f:14:b1:7f:bd:1c:
bf:32:20:a7:42:f9:7d:1d:f5:69:2d:31:6e:85:cd:1c:45:cd:
0a:71:c5:81:7d:90:f5:f4:6c:03:65:f5:dc:b4:c8:17:f5:f1:
f0:d1:9f:ba:80:de:b8:ef:66:83:3e:eb:d2:01:41:18:98:45:
4a:00:70:a5:dc:af:83:4e:53:9f:b9:21:82:87:9d:81:5e:68:
c5:c1:aa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:18:05 2025 by rpki-client