Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
File: T96UkP8v8-m_k7SY108x916p_P8.cer (raw, json)
Hash identifier: OczTBnsYinKbhxnLNcQB+jvybUmYs1lJRYjNMcwtkIA=
Subject key identifier: 4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02635C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 04 Sep 2025 13:45:46 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 138161
IP: 103.121.192.0/23
IP: 2001:df6:5100::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Sep 2025 08:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156508 (0x2635c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 4 13:45:46 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A912D14B, serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:9c:7f:48:8b:96:ab:8c:5a:46:09:0b:f3:
9d:ae:51:00:56:ba:97:59:e5:31:dc:f4:bc:16:72:
40:b9:ed:ae:68:e0:7f:9b:ef:1b:54:4b:19:4d:f4:
6a:31:29:f0:bc:18:c5:88:c7:49:67:33:ba:44:50:
40:3e:43:13:7c:41:1e:30:5b:54:d9:83:47:08:f5:
92:37:28:be:27:dc:40:11:66:b5:af:a0:88:c1:8f:
96:28:79:92:68:dd:c5:7a:c0:7c:54:0c:14:c5:79:
a6:fd:f8:02:5d:d6:9b:e9:07:57:4d:9d:ba:ab:dd:
c3:56:ea:ae:c5:02:dd:a8:a0:43:33:c7:d9:a4:34:
82:ad:4d:0d:b4:e4:14:30:36:30:ac:c6:26:38:51:
d8:f1:82:0c:fd:17:af:25:64:3e:37:30:89:50:47:
03:59:cd:5f:61:3a:3b:40:fb:12:e9:72:70:de:fd:
d1:f2:09:24:77:59:f6:80:7a:81:72:4c:23:c9:ed:
01:24:dc:e0:66:f1:df:01:a5:9f:ce:6b:c7:9a:73:
4d:e7:c4:77:70:d7:4a:f4:b0:dd:f0:27:14:c7:7e:
49:ec:d3:dc:d5:19:19:2b:3f:be:37:e3:78:a3:38:
fa:11:48:81:e8:bb:26:5f:fe:84:6e:ce:0a:54:0f:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138161
sbgp-ipAddrBlock: critical
IPv4:
103.121.192.0/23
IPv6:
2001:df6:5100::/48
Signature Algorithm: sha256WithRSAEncryption
d8:81:e9:b1:7c:f4:3d:5a:c6:55:5b:f7:67:ad:4a:3a:a4:cd:
5a:b4:2d:00:c1:39:f5:cc:e0:8f:ed:df:c8:a7:a6:97:00:df:
63:2f:db:d1:50:ee:97:c7:bc:1e:7c:b9:e9:3e:b6:46:40:8f:
21:75:dc:c2:fb:9e:ab:ae:6d:f0:4f:88:14:6b:c0:88:aa:43:
92:fb:d6:a2:ff:7d:af:96:73:aa:c0:02:16:f7:72:a4:fc:ac:
f2:cf:3b:7a:ea:47:2b:51:af:2a:d5:7f:50:10:86:3a:e5:4f:
4f:c5:42:48:be:9c:dc:b0:35:fb:bb:56:df:bd:f9:b6:34:6f:
4e:8b:7b:f3:7e:36:69:e7:b8:80:31:7e:71:b1:f1:e6:f5:24:
47:be:3d:3a:08:ba:51:b5:f1:74:74:bf:be:18:6d:02:f0:e5:
b7:46:80:6d:d5:1d:6a:0e:89:f7:bd:35:a6:14:7a:dd:5f:78:
98:bf:9e:1a:91:55:71:22:b3:ec:47:f0:53:3f:92:3d:cc:5c:
e9:f5:fc:f5:dd:a1:3f:b8:4d:14:fd:d4:06:34:ab:ce:5b:d3:
6f:f3:2b:ed:71:ca:ee:2b:47:61:cb:83:9f:28:8c:91:c3:4e:
47:ac:b3:25:5c:02:a2:e4:65:fb:fa:63:89:05:14:65:da:8c:
98:51:d3:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 6 12:06:46 2025 by rpki-client