Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
File: xl_8-yz82bzWja6waX0xbPNbI_A.cer (raw, json)
Hash identifier: XEaYDQmuDN5Gp4ltT3rugOlkmN/e68j4DGCz4zDlX9U=
Subject key identifier: C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025F65
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 25 Aug 2025 14:41:39 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 150137
IP: 103.90.12.0/23
IP: 103.191.181.0/24
IP: 2001:df1:940::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Sep 2025 15:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155493 (0x25f65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 25 14:41:39 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91472E2, serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:c1:8a:f2:07:ca:07:79:ac:98:d5:5b:6e:
11:7b:12:47:88:ba:e2:55:0d:7a:47:05:ed:c6:c8:
86:61:27:10:91:4b:b1:b1:e8:37:15:d6:5d:58:9b:
1a:87:13:c5:07:a6:0a:7d:f7:45:5b:d6:dc:c8:77:
b3:ad:3b:50:f3:4d:98:fb:b1:78:72:5a:47:8b:77:
6e:af:26:2c:2a:d2:11:7b:c7:67:67:ae:74:cc:b9:
ab:a8:45:35:3a:7d:0e:46:93:d9:06:72:fa:4d:42:
9c:2c:6c:09:e9:84:3c:54:00:86:57:0b:00:3f:92:
fe:f3:35:ae:30:3e:59:8f:20:99:18:8f:00:f3:bf:
80:19:e6:25:42:f7:4d:4c:64:9c:8d:6e:81:12:fb:
b0:6f:3a:f2:e8:47:87:69:a6:68:bc:67:ad:f7:70:
89:6c:d7:c1:e2:d8:77:1f:b3:02:f8:27:03:3e:b2:
18:01:15:45:19:97:77:fa:d5:72:86:fb:98:2e:fc:
8a:bc:67:51:97:4a:bb:89:7c:1e:93:40:c0:5b:b0:
07:2d:e3:a1:61:cc:5b:4f:9b:d4:fd:5b:7c:3d:5a:
77:1b:a4:6e:16:82:4e:10:4a:3e:ae:52:0b:27:04:
f2:47:65:9a:9e:a3:2f:20:c1:03:9e:fd:99:60:29:
7e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150137
sbgp-ipAddrBlock: critical
IPv4:
103.90.12.0/23
103.191.181.0/24
IPv6:
2001:df1:940::/48
Signature Algorithm: sha256WithRSAEncryption
39:cb:78:b8:87:02:e3:e2:33:e0:0c:5b:59:03:33:25:19:a1:
95:c0:9d:13:10:c7:27:fa:a9:f6:f5:af:10:60:dd:91:f2:7f:
f4:9c:93:17:04:24:9f:80:c5:ac:ed:21:e8:b0:f2:44:24:78:
41:af:ac:2e:15:fc:f3:16:a3:40:cb:96:2c:7a:2b:4c:14:d4:
9a:d1:4e:ab:86:3a:2e:48:7d:a5:81:cb:77:fe:c7:64:b0:76:
c3:84:fd:85:67:bb:78:8b:17:e0:c8:75:b9:54:6c:04:7d:dc:
1f:9e:08:cb:82:e7:c4:04:de:3a:16:11:be:d7:d9:f3:1d:48:
46:1c:8a:1b:be:80:86:f3:02:ca:90:7a:2c:f7:f9:72:ba:4f:
55:ff:44:a5:0a:24:71:af:66:e8:44:4e:0e:92:16:c1:ee:24:
a2:35:30:3a:dc:3e:54:b2:61:7f:ce:41:6d:be:db:07:18:b4:
79:26:22:68:b9:80:c8:62:b8:99:4d:73:ba:8a:d4:75:98:87:
b8:20:6d:f7:aa:aa:f2:ae:4e:ef:79:f0:5b:84:c8:c9:9d:96:
5b:76:00:3e:e4:52:9d:c7:98:0b:0c:5b:9a:fa:9e:a9:4b:8d:
20:1b:ec:bf:92:e0:8d:44:e0:90:ac:f3:e7:ce:05:cd:88:e2:
7d:ab:48:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:28:15 2025 by rpki-client