Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
File: NttE1MFZiGc4IVpWELEQwkSGylY.cer (raw, json)
Hash identifier: nfe9j/NhBOqfAgtWK+VQ8dTqczufmDxMnLybFdzrPMU=
Subject key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02557F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 14 Jul 2025 14:47:57 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 151335
IP: 103.105.22.0/24
IP: 103.196.187.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 31 Jul 2025 18:54:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152959 (0x2557f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 14 14:47:57 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7d:d6:86:8a:44:af:16:42:44:b9:1b:eb:d0:
7b:dd:da:36:d6:36:fd:90:6e:c7:d1:23:2e:63:cb:
0c:f2:b2:d7:92:d9:46:14:8c:0c:af:dc:ab:2c:2e:
30:5a:b5:b9:84:5c:8a:88:3e:da:d2:be:7c:6f:fb:
bb:a7:13:df:3b:42:00:0a:73:c6:aa:03:fb:20:a4:
51:d5:5f:b7:9c:6b:71:2e:68:e4:c3:c6:af:9a:92:
33:9d:48:05:3b:66:d9:2d:5a:f6:90:13:0b:77:ae:
f0:19:d4:91:8a:79:ee:3e:3f:4e:1f:ff:98:65:17:
bf:d7:2c:bc:6d:5e:e7:2f:66:0a:e5:75:59:9b:52:
6a:59:df:a1:26:b6:2d:23:2e:91:98:61:9b:6c:c6:
aa:d8:fa:e7:83:1d:49:f1:65:0f:aa:e7:04:dd:23:
c6:da:c6:dd:f0:5a:cb:73:c6:c2:cb:0e:7e:7b:03:
ff:d6:2c:bd:c5:a5:f7:ce:e6:68:e1:f7:a7:43:ba:
c6:f2:e2:76:60:68:a9:50:8c:cd:25:ae:ff:d2:65:
ee:de:1e:09:6b:db:05:0a:0c:0e:d8:7f:46:19:c6:
72:85:3d:f0:cf:7b:b3:e6:ef:33:71:68:9c:f0:75:
97:93:33:5a:59:cd:eb:b0:8d:78:8e:d3:c4:43:d6:
7b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151335
sbgp-ipAddrBlock: critical
IPv4:
103.105.22.0/24
103.196.187.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:f8:d2:b0:1a:86:5b:e3:ae:4b:f7:4f:72:2c:1b:de:14:98:
73:e3:e7:e7:27:11:6f:73:e3:c2:89:ab:00:f5:8c:d1:d1:e4:
3f:4b:c7:b8:3e:94:33:3c:50:3b:2a:4e:f8:f4:5d:81:db:a8:
00:0f:57:7b:e8:19:32:d4:be:8b:de:54:f2:25:84:c2:71:d4:
46:10:b7:9b:2f:cd:37:7c:2e:a9:e2:f9:b3:7f:60:72:f0:e5:
30:6c:2d:0d:74:45:7b:29:d5:80:c6:dd:fa:ba:b5:9f:51:a9:
97:cf:e8:8f:54:2e:10:50:16:35:c8:c1:82:13:bc:b6:96:0b:
03:ce:03:0c:5b:84:d7:34:e1:d5:2f:25:16:8a:6b:5e:bc:7f:
e6:5a:36:26:4f:ec:e6:c6:4e:e3:e2:3f:9c:da:ad:e6:ae:1d:
dd:05:b4:0e:4b:be:18:fe:a8:80:5f:31:b8:50:29:50:23:fa:
ff:7f:c0:c4:f2:b9:d0:1a:47:e0:95:17:2a:1f:2c:0d:97:be:
41:ac:81:57:41:d5:0b:f6:fe:08:f1:bf:b1:5c:30:d8:d5:4d:
44:3b:a9:db:75:7b:02:f5:c3:37:69:a5:c1:0b:a0:99:c9:c0:
c7:54:cb:09:1a:ab:d0:df:82:b0:8b:39:10:ed:cd:4a:21:7f:
42:01:46:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 21:08:27 2025 by rpki-client