Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
File: 2y3U_v83CRJX9gGdUKI5MOxG4fs.cer (raw, json)
Hash identifier: qMMHVRReHLorat//wYEfeOHjWN7TDNtAdLWyuW2WF+o=
Subject key identifier: DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025A43
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Aug 2025 13:51:00 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 24374
IP: 203.105.160.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 04:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154179 (0x25a43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 1 13:51:00 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A917F116, serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:86:55:03:0e:2c:74:78:32:54:f4:04:1e:e6:
6f:72:68:c5:8f:25:33:d5:80:c2:c5:d3:56:92:88:
2c:fa:77:bf:7e:1f:56:e3:7f:d7:ae:00:cf:e8:74:
17:c3:2e:c7:b0:dc:00:de:3b:c9:4a:82:99:aa:3a:
53:85:9e:df:97:09:f2:25:c3:9b:58:58:e9:76:31:
8d:28:ce:e2:ae:da:d9:8d:60:71:c1:19:00:cf:42:
71:23:65:34:19:8c:8a:5c:0b:7f:4b:e3:ca:43:10:
fa:b3:6f:19:37:8d:7d:a3:48:e0:22:67:78:fd:2d:
6f:5f:79:54:5c:ca:65:c0:02:94:f4:a2:54:32:f7:
13:37:37:28:89:ff:71:bc:89:e1:04:ae:87:dd:ca:
65:70:42:16:ab:b9:da:f5:77:1a:ca:0a:a2:f6:8c:
a9:bc:2e:a4:ba:c3:08:9e:20:64:0d:23:ae:57:53:
c1:02:6d:dd:6c:96:e7:c7:ca:c2:81:07:5e:44:52:
89:a0:96:b5:d3:62:6b:4f:a5:03:fd:d9:ce:93:43:
09:ae:81:49:be:01:8b:98:22:f7:fc:43:a8:8d:2c:
32:08:76:98:b5:85:12:ee:e2:ae:ae:a0:d6:69:42:
e3:e3:3a:57:ad:0b:3c:f6:1f:e6:3d:2d:ce:b5:1b:
df:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24374
sbgp-ipAddrBlock: critical
IPv4:
203.105.160.0/19
Signature Algorithm: sha256WithRSAEncryption
7f:44:ca:b2:33:fe:fc:f4:4b:ba:ab:02:e1:f2:41:41:8c:19:
32:36:ab:08:73:90:3c:db:0e:f2:be:3f:e7:41:fe:c1:ec:b4:
80:f0:24:ad:06:db:13:c5:25:2d:6a:a9:db:3e:05:be:c8:23:
c4:5f:18:70:35:88:4d:f6:c3:7f:75:e2:1e:a7:1c:85:cd:e0:
fc:2e:8f:ea:24:55:33:0b:5e:dc:b8:eb:25:24:a6:58:41:c3:
33:de:61:77:b8:a5:6b:bb:e5:f8:8f:e4:5d:0f:88:c2:95:1b:
eb:0b:c8:91:c0:51:75:ac:7e:40:19:6e:95:44:67:aa:de:63:
48:89:4d:54:23:4b:1a:cc:6c:aa:c5:ed:68:5a:86:cc:7a:4c:
a9:a7:3d:3f:96:71:2e:31:2d:96:da:43:85:c8:48:9e:da:1b:
0f:86:a0:01:38:fc:10:ee:0c:42:f3:16:80:67:53:92:9f:18:
b9:48:60:1b:0f:71:27:4a:69:5c:e0:0f:43:50:8e:1a:02:76:
00:07:de:06:c2:8b:13:b9:a1:c2:3a:83:f4:41:f4:d1:22:02:
00:fb:14:ee:dc:43:c5:1c:fb:46:e2:85:f3:3f:52:ca:7a:2c:
ad:f7:56:89:e9:85:38:68:a5:66:e3:dd:9c:d7:c9:8c:7d:60:
33:51:cd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:29:17 2025 by rpki-client