Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
File: x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer (raw, json)
Hash identifier: zykb/IpTg6MER9sxlT21Op2X93Tm/tbRPY+HXydRMjE=
Subject key identifier: C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0250AF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Jun 2025 00:44:04 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 133523
IP: 103.73.115.0/24
IP: 103.232.218.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 09:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151727 (0x250af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 27 00:44:04 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91E01B2, serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7c:13:a7:e8:c7:3a:f4:a2:9c:c6:84:93:cb:
3b:84:b2:67:e0:a7:ff:e0:9a:57:7f:07:23:1f:9f:
50:06:36:8a:88:14:88:70:0b:63:10:85:c7:dc:30:
e9:5a:6b:1d:07:3b:35:95:70:31:c9:15:35:fc:c2:
c2:d1:01:34:16:a5:1b:a3:0f:ff:d2:cd:70:45:09:
0e:8f:74:d8:7f:62:7e:11:e1:7e:3f:eb:b3:4f:56:
98:e7:fb:d3:17:e8:59:59:b7:6a:33:61:44:da:86:
02:99:07:4b:35:26:91:ad:7b:d6:cf:75:9f:50:b1:
95:5e:a1:fe:6f:60:2d:05:14:ad:f2:a6:e8:d2:0d:
51:34:6f:6e:cf:f3:ab:f7:e5:a6:b2:72:6c:88:17:
0c:d2:a3:ea:9b:09:d3:0b:07:21:f5:4d:e1:82:d7:
d8:dc:71:61:32:45:c1:90:46:90:bf:a8:60:74:96:
8b:c5:7e:cd:7e:ed:48:f1:d8:ac:7a:87:c9:37:5a:
6d:af:7f:d8:f9:e0:3a:ef:b7:c9:14:d5:53:05:cf:
3f:2b:a7:ab:c9:46:e1:6a:48:2c:7d:52:10:a8:54:
88:92:0c:c4:87:be:3b:4b:a8:c8:5d:41:00:46:b0:
62:b5:79:f9:7c:67:00:79:0c:54:66:6e:51:75:32:
94:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133523
sbgp-ipAddrBlock: critical
IPv4:
103.73.115.0/24
103.232.218.0/24
Signature Algorithm: sha256WithRSAEncryption
24:0a:c0:c5:e9:ed:09:30:5f:0b:c5:11:35:7c:63:61:af:e6:
99:28:89:4f:b1:2f:b9:27:c9:8f:65:d5:f2:7f:68:ae:a5:6d:
f1:93:3f:f9:f4:01:9b:b1:18:87:98:87:57:fa:15:f1:1d:fd:
bf:33:09:a3:96:c3:a9:b3:17:a1:6c:02:c0:bb:16:97:2a:b5:
f3:96:07:b8:dc:0e:b3:04:ac:e2:70:64:9b:b5:d0:42:5d:01:
8d:f5:02:cb:8d:ff:7e:96:80:24:f0:bc:12:83:b1:01:a5:89:
bb:0a:b5:79:c6:33:0c:c4:ce:a6:29:f4:95:bb:d0:09:f9:b0:
27:ca:4c:9a:60:e7:db:f1:82:81:96:47:f7:09:35:3d:ec:bd:
72:92:a1:8a:3b:a2:d8:0c:79:ec:8f:e6:9d:39:b3:ec:a1:22:
e7:4a:50:66:73:d2:fb:57:f3:ff:83:be:3a:e2:45:6f:38:e2:
51:34:73:de:3f:0c:04:87:78:3d:10:ad:d0:9d:87:0f:59:2a:
42:fd:45:fa:3c:22:88:6f:4b:4a:14:fd:00:c3:15:de:6f:42:
89:41:b5:0c:c8:88:8f:44:3a:91:b2:30:44:d4:d1:40:12:c3:
b0:6f:54:5d:3d:a3:53:38:02:18:5d:d0:c6:fe:21:a1:f8:37:
f0:4e:aa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 10:38:07 2025 by rpki-client