Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer
File: bG1HsRFPLVgaghKAXxLDdH80r4M.cer (raw, json)
Hash identifier: Fg20X3mnUlXjbBwPTdAL3wlfaGP8OTWvPyIDZJANCCg=
Subject key identifier: 6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024C12
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Jun 2025 03:22:26 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 135882
IP: 103.78.252.0/22
IP: 2400:1140::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Jun 2025 10:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150546 (0x24c12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 4 03:22:26 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91C7672, serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:71:83:22:b1:df:8b:91:2d:64:48:99:aa:
ef:12:54:e0:ae:eb:ab:8f:5e:69:6b:34:32:f7:e5:
05:ac:8d:75:fa:94:a4:26:7e:0a:88:97:04:e2:c8:
81:a8:18:a3:d8:78:3c:33:e0:0b:ec:15:c5:6b:70:
32:2e:e6:fa:34:0c:43:65:e9:57:85:27:1d:c3:ee:
59:78:d2:a9:5c:bd:c1:24:0f:ff:db:78:32:f9:12:
5e:dd:22:65:cb:42:06:25:da:4a:10:fd:98:2b:34:
7b:40:84:3b:53:9f:fc:28:30:6e:5b:86:f0:07:f3:
93:16:f0:a5:c6:22:c8:ab:b7:07:17:26:cf:81:7b:
81:76:03:a1:67:26:72:7d:7a:f0:a2:f0:7a:91:39:
08:74:6a:d0:7e:73:72:b1:fc:6d:e5:f5:e1:4f:68:
33:16:3e:f1:33:bb:0b:33:c0:75:5a:f2:f8:ed:79:
be:18:74:71:39:17:46:af:62:b5:11:2c:a9:bd:6e:
69:33:25:5c:96:3f:45:a6:25:41:18:b0:c8:af:5b:
2a:da:12:62:fd:fe:5b:1b:b3:42:e8:8d:1a:d8:a8:
0d:74:ac:41:08:eb:7d:1f:02:8a:cc:d2:b2:e4:60:
4f:fa:a2:f2:d0:12:05:fc:29:f6:4e:b1:84:69:16:
d3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135882
sbgp-ipAddrBlock: critical
IPv4:
103.78.252.0/22
IPv6:
2400:1140::/32
Signature Algorithm: sha256WithRSAEncryption
bc:bd:04:f9:d3:1e:3e:d4:55:e6:4b:b2:2d:d8:ae:cc:d6:f7:
e6:fc:f3:1a:ae:0e:b0:70:50:48:7d:a8:be:5b:51:0d:76:09:
b9:03:62:6d:9e:d8:f0:dd:63:ea:c5:28:5a:1d:b7:b6:ca:5d:
fb:88:8f:ef:89:ca:db:3e:89:7c:a4:78:48:82:4e:2a:5b:38:
ca:e8:69:d3:59:1b:59:f6:80:fe:c0:64:67:eb:96:66:75:67:
17:f3:42:cd:f1:06:c9:d9:19:ec:77:3f:e2:b5:28:ed:be:c4:
db:50:53:68:91:ca:fd:f3:00:d9:72:7e:87:78:1d:36:92:54:
f1:fd:36:31:2d:5c:af:78:22:40:d4:10:af:6c:b0:ba:37:7c:
53:9a:a3:ea:a0:3b:d3:54:53:03:35:c3:d9:e4:4c:cf:56:be:
70:5f:97:62:ff:f2:6b:ae:ee:cd:84:bc:a3:ea:25:3f:64:3c:
c6:b9:83:d6:b9:7c:17:d8:e9:37:98:7f:e8:2f:8a:13:17:43:
1d:07:8c:3e:a3:6a:8e:38:fa:79:e9:e0:c0:8e:b8:7a:9e:b9:
60:48:f0:db:f7:e5:d9:40:f8:94:30:7f:65:4c:73:b4:dd:e2:
43:20:cc:39:5a:31:24:4a:0b:f5:fb:3e:9e:a3:95:62:c8:24:
36:bc:49:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:23:25 2025 by rpki-client