Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
File: y3TVYT1zQs-5t_ed7wyfrYhceCI.cer (raw, json)
Hash identifier: 0LPUDlmDD8SS+ehCadBMf74Ypb82oLlNXBelRfmXuPc=
Subject key identifier: CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02523F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Jul 2025 19:41:40 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 151410
IP: 103.227.6.0/24
IP: 2001:df2:97c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Jul 2025 08:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152127 (0x2523f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 1 19:41:40 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A917845B, serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:b1:84:cb:f3:e6:ca:f5:7e:a8:f5:4d:0b:
79:ab:ae:3e:5d:91:bc:9f:ad:25:7b:42:ba:0e:bd:
5b:50:d5:57:3b:62:0d:a1:c6:a0:31:52:2d:88:61:
e8:61:0f:38:25:5e:35:59:bd:e6:6f:65:8d:8a:6f:
6c:d7:98:1c:07:72:fb:b8:6e:a5:33:b9:84:ed:dc:
04:74:e5:d6:d5:2d:5c:ca:15:2c:4a:d4:0c:3a:d0:
c9:0a:b0:ae:09:a0:49:e0:0b:29:cf:95:07:46:ae:
b6:25:b1:03:af:5e:85:1f:e3:9c:23:d6:66:bd:b8:
9e:15:60:58:66:56:4c:d7:3b:e9:ae:7a:ab:74:1d:
b3:fe:a4:90:c9:61:ec:b3:be:21:c7:0d:27:34:d5:
b0:8c:0e:13:48:e2:9c:83:8d:b2:b2:95:9c:da:71:
ca:ea:7e:45:c0:93:81:cd:1b:79:33:2f:d8:b2:36:
c7:9e:83:c5:40:db:24:3b:55:ce:8b:5d:29:46:bb:
04:ef:94:94:16:9a:e6:79:c0:d7:e6:d5:2c:fb:7b:
19:69:eb:98:e5:6e:af:01:01:5e:33:8f:d8:2e:90:
f1:fd:63:2f:42:a2:c7:c9:8b:90:21:c3:50:d1:fd:
e3:ae:b1:cf:14:d1:d0:66:b8:07:c1:4d:9d:eb:e3:
44:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151410
sbgp-ipAddrBlock: critical
IPv4:
103.227.6.0/24
IPv6:
2001:df2:97c0::/48
Signature Algorithm: sha256WithRSAEncryption
3b:9e:73:1c:48:97:97:68:f1:8b:09:a9:44:81:f4:a0:4f:2e:
6c:6d:e7:ba:52:12:22:ef:79:ad:6a:65:e8:b4:f3:03:f7:4e:
6f:a3:d3:00:5f:b1:8c:f4:4b:e1:37:68:87:37:66:2e:d8:56:
e5:76:79:01:3c:68:8d:c7:90:85:69:6c:27:59:05:06:0c:6b:
a3:bf:0f:40:62:bc:60:dc:e7:ce:c7:81:db:14:5e:39:18:4e:
be:51:e7:6d:b5:6e:43:47:0a:9a:0a:93:3f:0d:03:a1:93:15:
28:4d:4f:dd:58:8a:4b:3b:da:74:7c:f2:d6:82:a1:f5:07:d0:
c0:c8:0c:e6:6b:33:64:c8:e0:f8:52:87:fa:b4:a8:81:39:bf:
73:ae:28:ae:ff:82:c7:0e:65:59:69:56:c5:58:6f:35:00:37:
c4:15:0d:8d:83:85:d6:48:55:76:60:5d:e9:0f:e9:19:90:ed:
8e:05:d0:d5:2b:4e:5a:ef:ee:57:15:41:ff:68:8e:37:20:cb:
b3:c4:a6:ab:83:09:56:56:a5:77:35:91:fe:1f:cc:5c:ca:03:
25:d8:90:f0:3d:8a:4d:2f:40:06:4f:e4:31:24:32:37:cc:db:
f6:ab:56:2c:9b:fa:a7:10:88:f9:df:c0:69:68:02:c8:4f:c2:
2a:8e:e3:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 23 12:16:26 2025 by rpki-client