Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer
File: 2S2tTXbh9aAmwn8tuRxE-62OSHw.cer (raw, json)
Hash identifier: CGpZ5tQkpeW5KZUl0KCCLQgOWVLjjSljZ324lxW86gA=
Subject key identifier: D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02580F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 26 Jul 2025 00:50:44 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 24082
IP: 103.67.26.0/24
IP: 103.141.98.0/24
IP: 2001:dde::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153615 (0x2580f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 26 00:50:44 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91F5143, serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:05:3b:b4:fb:f0:af:c0:84:ed:23:80:da:f5:
17:98:99:a0:60:cf:50:7e:93:b5:dd:0e:c9:f7:52:
dd:24:d7:76:32:3c:20:70:4b:23:4b:8b:b0:49:9a:
19:c1:92:53:78:f3:14:05:10:56:94:1d:8b:53:44:
a1:af:59:d4:a2:fd:f3:ac:1b:78:4c:74:c3:82:10:
ed:37:2a:e5:27:cd:99:45:59:a4:a3:2c:a0:39:84:
b9:ce:12:cb:0b:28:8e:36:84:87:eb:4e:ae:6a:d9:
47:43:37:12:91:8b:33:6e:38:c7:6d:89:22:09:d2:
2e:13:b9:3b:e4:1d:fe:9c:1a:f7:e5:62:c6:d6:85:
96:a1:fc:da:a4:cc:2e:f5:ad:64:c6:b9:33:b3:ad:
39:95:17:d9:4d:bd:67:5e:70:24:32:17:0e:d4:85:
ce:aa:33:c8:70:c0:e8:48:04:2e:66:40:f6:c1:a0:
32:5c:37:42:0b:88:da:b2:99:cd:95:4d:86:00:2b:
1a:6d:86:67:5a:cb:92:7e:f0:82:6a:8d:a5:45:b8:
0f:be:24:d8:1e:55:03:f5:e3:86:e2:36:21:d7:65:
d7:0b:84:14:5e:01:9d:40:a5:36:4a:03:bb:a4:10:
bd:87:dc:47:c4:16:87:37:78:96:04:74:bc:f4:a8:
82:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24082
sbgp-ipAddrBlock: critical
IPv4:
103.67.26.0/24
103.141.98.0/24
IPv6:
2001:dde::/48
Signature Algorithm: sha256WithRSAEncryption
a0:76:b1:c9:ca:4d:6c:49:87:ce:66:d4:49:8f:55:67:25:6e:
e1:7b:81:2b:55:d1:dd:41:cd:24:14:48:28:88:1b:5d:27:e9:
d6:61:b8:29:3d:e7:55:58:8f:13:74:90:7d:30:ae:e8:12:e9:
e8:e0:6c:6d:65:7a:59:d0:29:63:3c:a4:d8:05:45:4c:3c:4b:
dc:d7:73:6e:ba:77:e1:cc:de:48:e5:92:e8:f3:f5:3c:f4:fe:
95:bd:2d:73:13:44:06:71:21:9d:19:d8:8e:fd:20:f3:b0:07:
1c:51:b4:26:1c:cb:be:4e:e8:92:0c:d0:b0:59:86:c9:f5:ce:
8d:24:cc:f2:20:f8:76:6f:75:39:0c:b2:84:ba:6a:89:d2:fc:
06:3b:bb:63:ae:9d:94:3f:86:a2:55:b2:c0:2c:9d:cd:5b:ae:
75:f6:fe:54:25:64:eb:ae:aa:7c:1a:cc:c6:b3:8b:b4:3e:92:
da:a2:53:f3:64:c0:cc:51:3f:28:14:94:08:f6:73:a2:a4:62:
3c:8d:a8:62:d5:e4:d8:17:72:5b:22:fb:e8:2d:ea:63:c2:15:
05:f7:a9:3b:69:52:44:1d:e3:4b:b5:0c:5d:f1:64:ba:6e:f2:
aa:29:09:ba:2f:05:e8:4e:5a:2b:85:0b:3f:db:3e:17:9e:61:
d9:e7:12:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:20:45 2025 by rpki-client