Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer
File: yPWXElLMBM4--LZy7nTid7LM1hU.cer (raw, json)
Hash identifier: AE3uqy+dLE0boPezcfXaxy/76QsWE4pTXmc0+1rPYNk=
Subject key identifier: C8:F5:97:12:52:CC:04:CE:3E:F8:B6:72:EE:74:E2:77:B2:CC:D6:15
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0263EC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 08 Sep 2025 08:42:44 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 139082
IP: 103.139.108.0/24
IP: 2001:df0:7780::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Sep 2025 01:13:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156652 (0x263ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Sep 8 08:42:44 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91F72E2, serialNumber=C8F5971252CC04CE3EF8B672EE74E277B2CCD615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:58:bf:66:27:a3:f5:39:c0:db:ad:d8:18:
86:20:14:0f:2f:11:e6:d1:b3:37:f9:24:1b:9d:b7:
f5:d2:8b:96:dd:e9:07:a5:dc:46:21:cf:6e:a5:90:
36:3f:ee:ae:56:5b:cf:e1:97:43:bd:ae:6a:e1:6a:
73:eb:73:50:17:da:c6:16:ab:0e:d5:6e:40:e7:2f:
28:ce:cd:15:c1:4a:48:45:e0:c7:f9:36:f5:ed:5c:
61:16:6d:7a:50:8b:d7:17:ae:bf:d7:5a:5f:cc:be:
66:96:14:b8:39:16:4d:ad:03:f6:28:be:7f:41:5e:
e5:7f:14:f9:3f:f4:a5:11:97:48:7b:7c:bd:71:aa:
a0:8a:71:2a:46:e1:b5:a7:9d:a5:36:5e:88:d4:1d:
63:e1:c9:5f:e8:ae:2c:c4:60:9c:7e:24:53:fd:63:
64:79:d2:96:d9:d8:18:ef:f2:24:1d:0d:33:8c:b2:
b7:3c:ba:53:99:9f:13:10:37:8e:e0:af:84:e9:d6:
14:3e:f4:56:2b:97:30:39:8d:d2:b4:f8:9f:01:61:
f7:4c:c8:cc:05:4a:d9:6b:36:02:38:a6:1e:36:ae:
dc:3d:4a:cc:04:76:a3:95:c8:39:1a:2c:50:e2:e8:
1c:da:e8:0c:61:f1:87:ff:d7:d2:f1:51:3a:31:2a:
9f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F5:97:12:52:CC:04:CE:3E:F8:B6:72:EE:74:E2:77:B2:CC:D6:15
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139082
sbgp-ipAddrBlock: critical
IPv4:
103.139.108.0/24
IPv6:
2001:df0:7780::/48
Signature Algorithm: sha256WithRSAEncryption
36:7e:9b:90:59:56:9c:73:4f:e3:91:4f:66:fd:ed:ab:09:bc:
7c:d1:1c:42:b7:10:90:9d:a8:aa:26:fc:b1:5a:eb:cb:38:eb:
3d:8a:fc:ae:5e:e9:65:88:65:4a:86:db:ec:eb:83:75:fa:ab:
ba:60:34:e8:ab:eb:59:b9:c7:30:ee:80:bb:da:ca:68:82:95:
a7:d4:04:ca:41:73:b9:95:0d:3e:48:d4:70:9b:4a:70:0b:7a:
44:ec:ab:8b:10:bc:e0:84:da:df:2d:27:bd:e7:5c:f9:99:55:
74:97:0d:29:15:ed:98:16:27:2f:38:2b:16:4d:1c:72:db:4a:
9b:41:55:6c:d7:f3:82:7a:29:9f:92:ad:08:c2:70:d6:76:17:
8d:30:6c:3e:37:c0:de:e7:b1:89:de:03:2e:75:e8:43:57:b9:
d4:57:94:97:04:f6:44:6c:70:7e:40:f2:1e:9c:f0:34:9a:96:
fb:d6:0f:e7:68:8a:b6:fb:60:c6:c0:b2:89:a4:c7:9d:2a:11:
27:62:75:a2:bd:bf:fd:bd:bc:ce:90:d0:86:22:85:45:1f:52:
fe:d2:d9:e6:7b:79:0f:44:75:42:aa:1d:f5:6f:b4:16:ed:bc:
39:1c:34:85:ac:9d:1f:fb:12:77:ef:a0:81:df:a3:5e:6f:90:
00:3e:d8:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 19 03:38:10 2025 by rpki-client