Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer
File: TH2sISA9rkFsH87q_FVlcgIiCKE.cer (raw, json)
Hash identifier: 7u+Kr3QPj2waOj3v+0Pq5nJFSUvF2flQ///VqohxWHQ=
Subject key identifier: 4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025C04
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 07 Aug 2025 19:50:49 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 151501
IP: 103.235.162.0/23
IP: 2001:df2:aa40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 11:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154628 (0x25c04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 7 19:50:49 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91C0CD5, serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:74:ca:5f:9d:81:59:42:74:b4:dc:1f:cf:
fb:17:e8:85:67:d2:8f:6a:d9:85:54:fc:69:d1:b5:
b4:52:19:df:eb:14:3b:2a:e1:c4:2d:eb:63:de:c6:
02:76:37:b2:17:ce:f1:63:57:d8:cc:88:0c:a8:25:
27:8c:93:76:96:f9:fb:73:63:19:29:18:b4:84:ef:
64:e8:7a:97:bc:dd:47:6b:47:62:e3:27:d2:e8:c3:
8b:ed:23:d4:a9:86:0a:e8:3c:56:68:90:6c:8f:bb:
ac:66:38:3d:b0:4f:86:d5:00:9f:81:bb:63:d2:3b:
3d:45:60:25:90:a3:9d:f8:8f:8d:9d:4a:b7:00:36:
22:f1:60:3b:80:cf:d9:88:01:69:2e:2a:a8:e0:20:
08:ee:eb:29:a6:a4:5d:75:33:b8:43:8c:62:52:bf:
07:e4:44:58:ee:f1:9f:98:fd:5e:e5:29:c8:6f:eb:
43:63:76:35:97:b3:72:bc:84:9c:6a:b8:45:1e:05:
a8:71:c3:30:3e:b9:48:93:80:8a:6e:23:ff:be:f2:
b7:05:19:83:1b:ff:ee:d2:8f:79:7f:f2:c2:5c:5e:
42:be:36:46:73:d8:c5:1e:0c:d9:75:bf:c5:76:c7:
44:3c:c3:5f:20:91:e7:cb:29:7e:dc:5e:11:b9:58:
17:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151501
sbgp-ipAddrBlock: critical
IPv4:
103.235.162.0/23
IPv6:
2001:df2:aa40::/48
Signature Algorithm: sha256WithRSAEncryption
9b:b0:3a:8f:05:93:e0:83:38:87:10:34:ee:83:f9:93:91:a4:
11:f2:a7:c6:10:f4:23:0a:de:c0:a3:f5:ff:5a:8a:2a:51:a9:
b6:ad:85:78:d9:fd:1b:d1:a2:c0:ba:6a:ce:02:80:11:7c:bf:
a7:11:98:28:2b:44:29:74:1d:80:1e:cc:36:28:45:20:5b:e5:
45:9f:7d:e7:48:13:d7:8d:d4:80:f5:45:de:48:99:d6:78:d9:
ac:d1:00:e5:ae:a3:da:67:66:94:59:8e:eb:14:f6:94:37:b9:
e9:1d:6e:2a:67:8f:a0:86:2a:ef:5a:3b:c8:7d:e1:9f:0d:e2:
ae:fe:19:db:2f:a9:6b:5d:df:d8:d1:dc:16:86:e6:ea:b1:20:
c4:fc:fb:53:cf:ff:56:ac:51:23:12:08:94:8f:0a:f4:7d:c0:
e2:86:15:77:ad:0d:08:e2:99:2e:a4:3b:ec:3e:d2:84:e4:5e:
c0:06:3c:da:4f:fd:f0:d6:09:27:ef:74:d5:3a:4d:70:02:74:
5c:c3:f1:a8:d6:9c:3f:1e:23:7e:d5:96:87:45:04:df:25:46:
61:02:10:ff:bf:ed:84:1a:89:e9:32:5c:ea:87:26:c3:12:bc:
c5:78:c0:eb:9f:b6:63:4b:9e:a6:c8:3b:b5:99:3b:61:cb:d2:
22:f1:4e:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Aug 22 14:18:02 2025 by rpki-client