Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
File: -ty5VaOsFGWZfQjySL-GxDNE-3g.cer (raw, json)
Hash identifier: Oy3mqoDAPeuDrSpbTg81Sf3m7vVmzZPLFT8zcSZDE1o=
Subject key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024AC6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 01 Jun 2025 16:41:44 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 142133
IP: 103.166.172.0/23
IP: 2407:59c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Jun 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150214 (0x24ac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 1 16:41:44 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A9148F32, serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:ca:95:19:db:32:8a:1e:fb:f3:66:8d:ef:
1c:12:05:50:01:ac:4c:05:cf:37:08:a6:12:b5:b6:
b1:d0:43:ba:ca:7d:20:14:32:a7:c4:38:10:ba:60:
03:43:ef:9f:64:06:c8:ec:fb:73:2f:c7:13:55:b7:
24:f5:cb:8d:7b:91:02:7b:76:04:14:fe:ed:47:51:
05:2d:e5:83:04:80:c7:c9:5a:bc:f3:89:4a:50:04:
96:f4:d8:7d:02:79:7f:4a:98:cb:9d:f9:25:16:a4:
f6:9a:2d:7a:8e:a6:02:1f:97:97:27:d9:ec:d8:7e:
6b:bd:eb:69:16:cf:d9:6c:39:c9:91:42:3d:0c:e6:
8c:76:4a:d6:aa:16:2a:e9:41:d4:69:d0:1f:54:03:
0d:ae:38:a7:64:ba:6e:06:4d:ad:2a:e7:34:59:ac:
f3:ae:d4:38:a3:05:46:be:ef:ba:6d:47:fa:a6:f8:
20:30:72:1a:e4:ea:96:76:f9:e6:3a:91:1e:55:f8:
e0:8c:8a:d9:f0:a9:4b:65:df:40:62:e4:ca:6f:47:
03:cc:a6:81:76:91:01:b7:16:74:9d:e4:2f:7a:fb:
6a:99:8e:7a:42:9c:29:f4:e0:96:f8:c8:d1:57:ef:
be:ca:3b:79:e5:62:39:bc:c5:cf:37:95:c1:a6:62:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142133
sbgp-ipAddrBlock: critical
IPv4:
103.166.172.0/23
IPv6:
2407:59c0::/32
Signature Algorithm: sha256WithRSAEncryption
3f:f3:7d:1f:b3:2e:dd:17:f8:d2:a1:4a:90:87:3d:9b:07:67:
98:d5:f2:c1:fc:a2:1e:a9:90:45:de:1d:ed:0c:0d:ec:e6:48:
a7:8d:45:04:89:20:4f:54:79:fc:7a:89:c7:26:a5:bb:ff:67:
73:40:cf:29:ec:9d:73:ce:ed:63:7a:f1:41:2a:e2:bf:eb:8f:
37:40:61:55:4d:5b:2c:45:7c:24:b7:2c:c3:c0:ca:5e:0b:c1:
df:be:1f:6b:89:f6:b3:0d:a7:50:5d:ca:ad:cf:61:60:3e:a5:
da:d7:e0:f6:36:b7:5b:eb:9f:fa:c1:53:58:c6:bc:6a:5a:41:
db:9d:6b:ae:d8:37:fa:8f:87:26:85:8d:3f:dc:0d:16:61:c2:
a6:09:ee:ef:1d:a8:1b:86:bd:2d:6c:78:d7:fe:d1:c8:db:2b:
fd:0a:f2:ca:93:d4:6d:17:e6:91:e7:ad:0f:95:df:e2:b8:36:
fe:16:5f:2c:e1:9c:73:3c:dc:96:cd:45:3a:77:ab:fc:c9:ee:
b6:cd:13:7f:85:72:f4:a3:84:46:f2:e2:3e:cc:00:f2:0d:08:
b2:b4:41:71:86:ca:66:6c:8f:31:41:a0:1e:3f:4a:2b:60:eb:
4d:4c:0d:e8:07:3b:45:8f:ac:2f:ab:33:db:17:2c:ae:4f:f7:
62:d5:26:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:33:51 2025 by rpki-client