Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer
File: rljj8yTZRsaD9KOPjU4c1yV0gwo.cer (raw, json)
Hash identifier: 4n7IZh3fBq5hpMaXANvdVEgfwEXbzG1ipnW0ecbRqsc=
Subject key identifier: AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0261A2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 01 Sep 2025 04:53:28 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 140549
IP: 103.13.182.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Sep 2025 15:47:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156066 (0x261a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 1 04:53:28 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A9191885, serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4f:b0:b8:05:6f:5f:b6:12:2a:df:8c:96:94:
6b:8a:b3:2d:a4:70:4d:96:b7:52:cd:9e:f6:f0:c4:
65:6d:41:4e:d4:b3:ac:d4:b9:ae:d6:bf:df:e9:db:
26:34:10:25:5d:d0:a3:19:66:cc:9b:a3:5e:8d:e3:
88:42:dc:67:ed:22:1e:03:d6:99:6e:47:7e:14:49:
d1:fd:f9:f9:f8:38:95:28:46:7e:0c:ba:57:09:bc:
12:bd:ed:41:60:f3:56:f4:4b:65:5c:39:01:1c:95:
c0:ac:6e:52:ba:9a:18:87:0c:67:c6:5a:d4:58:09:
cb:34:ee:24:3c:46:b5:ed:39:09:65:f6:55:f8:7c:
68:47:e7:2a:b6:06:f0:7e:87:13:91:ec:54:68:f6:
43:f6:46:d7:47:9d:2b:94:f7:2a:30:30:43:9c:56:
2c:f1:62:bf:b1:4f:a8:00:05:1a:31:73:be:ac:f4:
ac:de:f0:6c:b1:37:36:41:48:bd:f3:ed:86:7e:de:
77:7e:83:8e:c0:50:ff:83:bd:e8:8d:62:3a:69:3e:
3d:b0:aa:6d:48:ce:a5:af:3a:6d:f7:7c:64:d8:1b:
55:33:82:f0:2a:32:94:47:1c:bf:1c:ac:b8:b0:f4:
21:d6:bb:82:a4:1e:69:0e:b3:de:d0:ac:47:35:b8:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140549
sbgp-ipAddrBlock: critical
IPv4:
103.13.182.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:82:c8:9d:50:17:7f:78:80:3a:8f:26:47:86:5d:2c:96:62:
36:d9:84:a6:41:8b:70:44:0d:9c:b6:c6:9e:7a:a6:88:3e:8e:
3c:08:89:f7:d4:f7:55:42:a6:65:be:b4:62:63:6d:96:7f:d5:
d7:5e:ee:98:c0:26:86:94:8c:9d:4b:bd:d1:2d:eb:0e:17:e0:
4d:e6:44:4f:44:bf:85:1a:15:95:7f:f1:9a:ea:de:b3:19:d9:
88:c9:39:2c:03:96:f4:53:08:22:37:e4:16:48:8e:7c:09:a3:
27:a2:5a:4d:79:1d:b2:5d:59:73:b7:01:d5:d4:80:b9:97:b0:
20:d7:5c:f5:43:0a:06:54:2a:5b:0b:62:60:1b:5b:b9:ed:b4:
ec:83:31:0b:46:f8:65:ff:dc:10:c4:39:ea:29:8c:75:c7:ac:
b1:04:09:b1:77:65:db:3d:97:8f:67:81:27:29:48:b9:02:79:
c8:b8:40:ee:e7:2e:a7:b3:e5:d5:07:1b:ab:6e:a2:2c:ae:7f:
b3:2b:fb:9e:6b:ab:ca:dd:2b:a3:a4:f8:06:fd:10:ed:72:ab:
af:93:3c:78:90:37:d2:c3:78:dd:e9:7a:1a:b6:18:e9:6c:5d:
b4:1d:db:55:1a:61:f8:ad:d3:98:72:9b:17:c2:8b:a4:a9:fa:
36:e3:51:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 17:40:29 2025 by rpki-client