Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer
File: 2kdUAUEh0yaH2X05LZBgSagU_MM.cer (raw, json)
Hash identifier: 79+hN/BUhBj8AXe/iLqSNgzhDB02L9GwIkQVzeqxLfk=
Subject key identifier: DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0255D5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 15 Jul 2025 16:51:55 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 149428
IP: 103.190.58.0/23
IP: 2400:8e20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 04:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153045 (0x255d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 15 16:51:55 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91777A6, serialNumber=DA4754014121D32687D97D392D906049A814FCC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:33:06:76:88:2c:df:a8:ff:ee:0c:ff:c0:
15:77:1d:af:d7:71:0c:57:d6:10:f6:e6:06:2f:02:
a3:be:99:25:b1:a4:e0:7b:06:55:70:36:a1:c2:3a:
ff:6b:79:5c:db:9d:95:42:30:2c:8f:49:d5:ed:ee:
c2:e3:f8:e7:43:20:79:a1:25:c3:ce:9f:ad:f4:4f:
d2:a3:36:2a:c6:e8:9f:e5:5b:28:34:76:56:27:48:
f9:95:cb:83:0a:a8:5f:7f:28:3e:3c:d7:d9:1d:49:
c7:61:c8:80:25:ab:ea:61:cc:b4:4e:f3:b3:f4:50:
6b:e4:87:62:3a:cc:76:2c:73:f5:49:d5:2d:0b:04:
0a:5d:7c:d6:84:fc:75:09:9d:14:75:8f:fc:3d:20:
55:f6:04:72:83:74:a0:63:67:16:34:38:32:90:18:
86:6f:c3:7a:86:0a:fc:1e:c2:fa:c1:e5:80:f3:e7:
cb:ff:9f:93:44:6e:ad:02:65:27:18:eb:bd:73:62:
76:27:a5:06:b2:81:d4:79:8f:88:3f:b2:1b:b6:2a:
5d:e3:75:39:ba:d4:33:ca:f3:7a:d5:03:89:ff:f1:
99:e6:98:1c:3f:af:7e:d2:a8:7e:75:97:ae:2c:15:
5d:6f:a9:9b:23:6e:f5:14:e5:ed:ec:75:e7:60:82:
d4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149428
sbgp-ipAddrBlock: critical
IPv4:
103.190.58.0/23
IPv6:
2400:8e20::/32
Signature Algorithm: sha256WithRSAEncryption
92:24:2b:e7:3f:05:01:7f:4e:fd:c0:9b:c0:6e:2c:93:33:9d:
0a:11:2f:7b:50:8f:8f:51:99:11:8d:d4:56:06:59:cd:10:b8:
ec:0f:7e:b9:58:5a:22:79:64:f8:ad:57:29:46:01:ef:31:9d:
e1:be:bf:2f:df:70:e6:9c:1f:18:3e:27:f6:a1:a2:c9:28:bb:
e3:11:16:81:b9:14:a0:30:77:eb:8d:a3:f0:71:52:d0:c6:5a:
dc:02:1c:87:36:5c:cb:1d:cb:f3:83:f4:0f:63:04:59:e6:86:
24:6a:1c:2a:35:8d:58:13:75:8c:c4:b3:cd:79:4b:ce:a1:26:
1f:eb:20:c0:1d:5f:33:e1:ff:89:ce:82:60:36:35:b0:0c:a0:
ce:ff:20:f9:b9:a8:3b:de:09:51:48:a5:42:78:e4:57:4e:92:
6e:e9:17:1c:fc:0c:15:c5:e2:97:3c:38:7a:e9:8e:d5:55:9b:
ba:a0:e0:0a:9b:84:99:54:50:9f:ad:b4:94:8d:49:8a:11:ae:
95:8b:53:c3:96:4e:f7:f4:d5:0e:97:86:99:4b:d9:1c:9c:bd:
d9:3c:d9:6b:97:58:77:0a:24:b8:4d:e0:67:c0:bd:01:3a:aa:
2e:da:9a:d8:2f:d2:d8:37:0d:9e:c0:d9:76:c8:f8:63:bc:df:
21:6b:6f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:50:07 2025 by rpki-client