Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
File: 6rJKkMbQRs2D-170o8WY5OqaFow.cer (raw, json)
Hash identifier: lBjFOkzSlWJ7pue0Vkrd2oVLe1qNb83aA8DsjpWpXe4=
Subject key identifier: EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02599A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 31 Jul 2025 18:23:23 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 139192
IP: 103.139.144.0/23
IP: 2001:df0:8080::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154010 (0x2599a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 31 18:23:23 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A9137242, serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:57:26:4c:c9:8b:98:03:4f:3c:e8:31:25:
64:a1:04:8b:a5:79:e5:99:72:0f:e8:5c:56:e0:b8:
28:33:82:ad:6a:ea:fe:5a:63:29:84:a1:77:97:bb:
2c:ac:fc:a9:cf:03:48:60:7e:6a:6d:ed:00:f8:7d:
b7:7a:b8:61:a5:e6:a9:8a:5e:ed:60:bf:85:6d:57:
86:c7:bf:b6:22:06:f5:0b:21:96:cd:02:dd:dd:20:
20:12:88:bb:7b:0b:b8:c2:54:e6:23:d0:5c:27:68:
57:c8:9c:37:04:d7:77:56:e1:51:6d:b1:19:0d:b7:
96:52:82:5b:e2:51:39:de:3e:72:d7:c5:65:64:21:
c5:f6:1e:59:8c:4e:af:6a:76:89:36:93:c5:5c:32:
d7:0a:12:c7:15:fc:b7:a4:74:90:fd:66:15:2d:fa:
49:f4:7b:b7:5a:96:2f:b5:76:31:e1:5f:74:ba:fd:
fb:bc:88:7c:86:68:43:d5:50:37:94:73:7f:aa:51:
ab:1c:b6:4e:e7:73:03:3d:93:66:9f:39:e2:0e:ad:
30:48:4e:e7:cf:1a:c5:b3:4b:bc:c0:65:ce:ce:3d:
aa:5f:94:4d:62:a5:8c:ea:5f:c0:1a:7e:a3:ca:88:
79:64:37:4c:0d:a8:f7:60:11:fe:56:08:85:7d:a0:
15:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139192
sbgp-ipAddrBlock: critical
IPv4:
103.139.144.0/23
IPv6:
2001:df0:8080::/48
Signature Algorithm: sha256WithRSAEncryption
47:37:46:7c:9e:97:bc:f9:2e:bc:e3:9e:d1:a9:8a:19:62:5f:
55:93:8b:5d:af:cb:c9:3f:01:c0:c0:53:a9:a3:85:b3:e0:77:
ed:d7:bf:f2:d0:26:65:08:9d:2a:86:26:8b:79:1b:92:2a:80:
9f:13:ed:ac:10:6c:78:17:73:2d:aa:82:02:63:e6:ab:96:db:
79:13:72:dd:53:cc:d8:e6:75:b6:76:7e:cd:c9:a0:f0:85:4c:
dd:02:51:08:e2:07:ce:8e:f8:df:5d:ed:34:b8:2a:76:92:09:
f5:c7:68:91:58:d8:e9:a8:e8:e1:15:5e:e8:71:30:73:94:69:
18:cc:f9:3e:df:dc:62:58:00:14:7c:2a:b2:7a:09:af:88:98:
ea:a3:e4:85:43:23:7a:96:b3:9d:ff:e3:e8:0e:37:62:8e:c7:
75:f1:3f:f6:49:fc:e6:fa:f1:72:77:45:31:64:8c:88:18:cd:
aa:19:51:d7:8b:2d:c8:cc:80:7f:d1:ed:8d:bf:26:4e:f6:75:
93:9b:7d:4d:7f:fe:3b:ee:ed:02:ec:e0:37:60:16:7a:35:3e:
66:dc:db:5e:56:a1:2d:dc:31:21:22:ed:5b:99:47:5a:59:6d:
87:d5:49:ce:60:6a:16:77:43:8a:6d:5e:d9:fe:29:1c:60:7c:
4f:c9:ae:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:57:55 2025 by rpki-client