Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkhXfqTVPPBfDXTKwBD2q8QVI48.cer
File: SkhXfqTVPPBfDXTKwBD2q8QVI48.cer (raw, json)
Hash identifier: xzUsXbrspBIa7xCRM3WeiFmVE3nwgspw7zI/dmnfPt0=
Subject key identifier: 4A:48:57:7E:A4:D5:3C:F0:5F:0D:74:CA:C0:10:F6:AB:C4:15:23:8F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025B6E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 06 Aug 2025 04:46:30 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 132343
IP: 103.13.178.0 -- 103.13.180.255
IP: 2001:df0:2e3::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 11:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154478 (0x25b6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 6 04:46:30 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A918C519, serialNumber=4A48577EA4D53CF05F0D74CAC010F6ABC415238F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:0d:ba:67:97:5f:8c:92:d1:f9:f3:f2:d6:
bd:a9:fe:6e:05:a2:b3:51:0c:6c:ff:62:f7:c5:a0:
96:86:e2:5c:55:88:41:46:13:ec:a1:78:8e:f5:97:
6b:e6:51:70:2d:df:72:dd:ca:65:71:2b:cc:9b:06:
d9:0d:66:66:02:d8:76:22:bc:34:42:9d:9d:1a:12:
64:3e:6f:29:ff:8c:2f:d8:35:15:a3:b4:83:47:1a:
46:8b:2d:80:88:36:c9:49:2b:44:1a:f8:82:70:41:
01:62:d0:f3:6e:14:bb:7e:e3:53:b3:f7:bb:66:5c:
8d:e6:ea:57:55:cc:9e:75:5a:d4:a6:60:84:cd:14:
f8:3a:31:6e:fe:7a:03:37:23:7d:42:25:74:70:f3:
f0:99:9c:d5:97:b3:8b:b2:c2:08:3a:71:df:a2:15:
45:fe:e3:39:8d:08:5e:73:c2:d9:22:8e:5c:f9:a3:
47:f8:1c:3d:aa:af:91:b2:d7:63:b5:e0:75:b0:2f:
63:9f:4e:06:82:9c:53:8f:62:6c:e4:91:6f:f5:eb:
4a:c9:36:69:47:5c:1a:96:c3:0d:29:6d:0c:54:50:
b3:30:09:b1:07:e0:88:05:0d:b5:a5:84:4d:fa:fd:
64:86:eb:4e:19:f5:2f:dd:88:1c:3d:22:e2:bf:eb:
c3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:48:57:7E:A4:D5:3C:F0:5F:0D:74:CA:C0:10:F6:AB:C4:15:23:8F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132343
sbgp-ipAddrBlock: critical
IPv4:
103.13.178.0-103.13.180.255
IPv6:
2001:df0:2e3::/48
Signature Algorithm: sha256WithRSAEncryption
85:2e:f7:91:34:78:52:96:92:24:42:1d:7f:8e:73:ff:3d:97:
3a:24:1a:6e:15:25:86:ab:c0:24:4e:2c:66:15:2b:e7:4a:ee:
3e:b0:e6:5d:44:88:3c:0c:2f:fa:7e:30:67:dd:1a:85:f9:85:
94:4f:0d:68:20:63:bc:b1:a7:f0:2a:6f:1a:1a:84:ed:71:04:
4a:5c:de:9a:76:10:0c:43:e6:54:43:d3:f2:32:ad:27:2a:7e:
58:27:3e:d3:67:80:36:d6:e5:52:0f:f6:1a:6d:74:27:ab:7f:
b2:29:37:1c:b2:93:63:d2:24:bc:91:69:c3:ab:ed:66:38:08:
6f:12:cf:cd:6d:28:8e:be:c7:89:e8:bb:03:90:f2:1f:fa:49:
d1:a2:01:62:53:17:6a:59:07:f6:4a:2e:4a:9b:1f:6e:65:35:
77:17:36:fa:04:83:cc:16:d5:03:28:6b:32:9a:37:e0:91:56:
59:0d:e9:b0:c5:34:bc:f1:8a:70:cb:1e:f4:b8:92:a4:a2:b0:
9b:16:45:97:03:1e:e4:1c:89:83:1c:d4:02:0a:0b:96:7a:b9:
55:34:fc:e4:34:3e:fe:86:1f:14:4e:9b:9d:69:cf:14:c2:82:
0b:c3:06:12:76:c9:ae:d1:19:d6:00:53:ee:1d:4e:fa:4d:e0:
55:0c:9e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 14:26:30 2025 by rpki-client