Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer
File: 6-6B_EvJ1nPd90hUplXtX6zl0YQ.cer (raw, json)
Hash identifier: yMQ+fuqUyTWoGduobOXuu/+WAkEv/x8mse5eViUFFoc=
Subject key identifier: EB:EE:81:FC:4B:C9:D6:73:DD:F7:48:54:A6:55:ED:5F:AC:E5:D1:84
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024890
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 26 May 2025 12:31:22 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 138961
IP: 103.137.178.0/23
IP: 2400:b860::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Jun 2025 07:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149648 (0x24890)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 26 12:31:22 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A9119635, serialNumber=EBEE81FC4BC9D673DDF74854A655ED5FACE5D184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f4:2d:b4:71:d4:81:82:65:ee:97:81:0a:85:
11:94:ae:e1:52:12:22:14:02:8c:43:7e:38:f6:49:
fa:f6:08:56:86:bf:d2:ea:75:c1:2c:c0:53:7f:22:
9b:44:0e:a8:b8:40:44:a7:c1:e8:2b:04:f9:0e:86:
67:73:02:95:9a:85:2b:39:01:4e:e7:d6:b4:04:80:
54:f4:0d:42:1d:d0:1e:e6:10:f9:a9:8c:bd:7e:75:
30:40:74:86:70:3c:27:05:b1:d2:86:0e:74:cf:04:
c0:2f:04:cf:98:5c:b7:aa:40:35:ab:8a:d2:68:a4:
95:a2:89:63:f1:e8:9c:16:25:e6:b4:e6:50:9f:be:
54:e8:64:08:fc:b3:5f:3a:18:a1:a2:94:d6:23:97:
83:70:02:60:c4:3a:80:b1:e2:11:0b:86:01:36:b4:
2c:e9:14:f0:11:c8:47:9e:14:48:19:7e:96:83:de:
c8:b3:8b:fe:8f:40:7f:7f:bd:be:90:ea:bd:72:43:
ad:37:b7:87:00:e7:72:72:de:eb:d3:27:fd:eb:1a:
46:78:5c:ca:f0:9b:5e:06:99:31:dc:a8:bc:eb:68:
f5:bc:56:34:1b:bd:fe:ed:fb:b4:f8:95:40:47:1c:
f5:34:99:7c:be:d0:48:65:5f:28:dd:dd:bc:12:1d:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EE:81:FC:4B:C9:D6:73:DD:F7:48:54:A6:55:ED:5F:AC:E5:D1:84
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9119635/AF0F8D8A584911EABF6A8412C4F9AE02/6-6B_EvJ1nPd90hUplXtX6zl0YQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138961
sbgp-ipAddrBlock: critical
IPv4:
103.137.178.0/23
IPv6:
2400:b860::/32
Signature Algorithm: sha256WithRSAEncryption
65:86:9a:7c:82:28:2a:ac:c1:9a:35:59:91:43:64:ed:5f:4d:
0d:bf:ae:38:90:b7:43:b8:f3:ac:de:55:2f:73:d0:c5:af:a2:
c1:1d:35:b3:aa:4e:13:81:5b:35:5a:43:9a:ec:cb:ac:9b:4f:
9b:9e:38:50:1f:50:47:02:79:ec:6c:10:10:a6:de:93:7d:89:
69:34:28:7d:94:b4:93:9b:f5:e9:8b:ad:8a:42:9c:df:97:47:
e2:5d:2d:3f:61:24:a9:41:d4:69:c9:19:2a:8d:6b:ea:ed:6a:
44:59:31:89:3f:63:6d:98:99:31:51:df:79:2e:a6:c2:85:50:
c2:62:31:e9:9a:0c:23:a1:61:84:96:ee:5f:d1:d6:ea:e8:ea:
6a:46:01:fe:c9:56:e8:7a:d9:6b:c4:78:20:60:6b:98:50:cb:
b5:5b:4d:8a:92:4b:36:fe:e9:ec:43:67:66:4d:f1:77:0e:2f:
5b:63:67:ef:35:cd:c9:fc:61:0a:01:19:c2:fd:e1:3b:18:82:
aa:9c:98:c9:c8:84:e5:db:f4:ba:d5:c0:b7:21:49:54:e6:be:
3f:3e:07:3b:50:0b:9e:82:11:c1:ca:bb:2e:e5:fa:2b:fa:74:
15:b5:eb:b8:8f:71:5b:d6:99:14:66:01:89:d6:62:4e:1d:b7:
d7:e5:d6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 30 09:45:24 2025 by rpki-client