Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
File: 1QTYGQKxg4soKun0XE3D-BeOJO4.cer (raw, json)
Hash identifier: tS+D3TYgSyZBLYf44kxjCuFMmfeiBtLDNH7/K5Psgsw=
Subject key identifier: D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025719
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 22 Jul 2025 14:55:50 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 131240
IP: 103.68.107.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 04:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153369 (0x25719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 22 14:55:50 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A913A74D, serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e9:0e:47:fe:aa:3b:4c:c0:2b:a7:af:3f:17:
11:27:27:0f:97:ec:18:17:3d:fa:d1:8d:10:25:d7:
30:cb:18:e8:b1:96:b2:55:0c:90:46:92:bc:cc:1e:
ce:51:4f:67:90:48:f2:f1:c2:ce:aa:9a:f9:a6:57:
c9:12:64:e9:13:a5:13:aa:c9:e2:eb:e9:82:3d:ed:
f8:fd:09:d8:fc:3c:e3:36:08:63:1e:ea:15:bb:3d:
95:12:ed:91:fe:85:9f:5f:7e:a7:71:68:b2:f6:33:
cc:e4:fc:03:86:f3:e2:ed:d7:b8:91:cb:dd:0a:fa:
d0:6c:e5:66:78:19:ca:f8:8c:2e:7d:c4:5a:d1:8d:
1d:cc:1e:f6:24:a8:bd:d3:74:a4:c0:ad:e1:dc:c2:
6a:43:8c:85:d7:d8:6c:b6:b0:4c:6a:12:1b:28:d1:
04:7a:c5:fd:75:7f:56:96:a1:78:60:b0:ed:9d:fc:
cd:eb:ba:7d:cc:88:e9:a7:36:3c:f3:57:3f:15:a6:
7c:ee:50:83:de:7b:0d:0c:44:66:b2:03:44:b1:9e:
98:22:8b:1a:f7:89:b4:b9:ad:31:f8:3d:03:68:0f:
c3:74:ff:01:a1:43:db:a2:0d:62:28:6e:79:7b:1a:
d8:ef:7a:0c:a6:55:c1:c4:01:32:ed:86:80:51:56:
f5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131240
sbgp-ipAddrBlock: critical
IPv4:
103.68.107.0/24
Signature Algorithm: sha256WithRSAEncryption
67:4f:55:0f:c2:aa:70:7e:61:a1:9b:5c:8d:b4:e1:bd:bd:a1:
d0:af:58:70:2c:87:9a:95:fe:e9:00:9d:c2:60:2d:2f:03:36:
da:56:ae:44:94:6b:0b:20:9e:fe:c7:20:c9:85:c3:3c:d4:72:
bb:19:26:ac:9d:44:31:44:27:3a:31:11:1e:16:a8:5a:7f:7c:
d3:aa:cb:e5:c4:97:76:4d:92:92:98:48:a6:f4:58:7c:b6:cd:
e9:df:ec:3b:f6:4f:05:eb:31:4c:5a:ea:9c:e1:b0:32:32:a3:
09:f8:30:cb:4e:71:26:05:6e:ae:b0:44:a7:f4:67:4a:dc:36:
d6:ce:1c:7d:f4:fe:15:25:d0:c1:2e:26:c8:f8:8e:00:f0:c3:
9a:dd:bf:47:45:b3:cb:65:50:7a:15:52:28:02:50:b5:bb:e2:
5c:ba:37:91:34:a8:be:23:bc:49:b9:91:92:67:0d:23:c1:34:
76:90:bf:47:5c:ba:d4:6e:0c:0f:3a:4e:04:6d:34:89:b7:18:
3f:8a:9f:25:03:95:7a:5c:9a:4b:73:be:30:44:54:ea:7b:1a:
4c:57:65:9a:5c:93:f7:41:62:50:c6:ca:90:bb:27:18:f9:4b:
3b:6f:b0:3e:3f:82:e4:7f:a1:aa:f1:f5:b1:83:0f:c0:ef:d3:
b4:2e:a0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:17:32 2025 by rpki-client