Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer
File: BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer (raw, json)
Hash identifier: Vu35KfOYaPgnqxhnoQ6A7/Avad0O9hqhmEdJ5uqpJUM=
Subject key identifier: 05:CC:83:CF:4B:8B:1B:37:89:FF:E4:EC:44:60:A1:6D:89:EA:32:77
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025831
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 27 Jul 2025 16:09:30 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 142287
IP: 103.167.118.0/23
IP: 2001:df6:b180::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153649 (0x25831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 27 16:09:30 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A9184559, serialNumber=05CC83CF4B8B1B3789FFE4EC4460A16D89EA3277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:18:01:c8:08:1e:6f:58:04:6a:29:cb:02:
00:a8:35:ec:23:20:6c:bb:8c:55:a6:2b:37:2e:af:
8f:63:63:63:20:a0:6d:6e:cd:eb:20:3d:21:63:a0:
6e:c3:87:2d:51:3b:be:2b:10:95:c5:02:8e:3f:a1:
32:c4:8b:0b:40:0a:74:25:b6:65:1b:f7:c8:a4:08:
9e:ab:59:d7:b5:ec:aa:69:15:ec:57:82:e9:5e:db:
b9:92:d0:c0:eb:72:d1:29:15:18:48:ab:c8:47:77:
77:2e:21:4a:67:22:8f:fe:97:45:d2:23:a8:8c:a6:
3e:b6:88:6d:4b:a4:18:19:47:3a:d7:3a:99:e1:2b:
15:22:df:ef:c4:9b:04:03:98:3f:9e:ce:75:b5:91:
0e:ee:e1:df:58:8b:17:4c:72:62:af:1e:0a:64:66:
2e:5f:55:92:21:c7:df:ac:68:54:c2:9c:0a:c2:6f:
60:b1:81:a7:e0:5b:62:b8:d2:62:6b:74:8c:9d:4a:
15:68:4a:08:98:55:51:33:c9:61:2a:5a:e2:82:c5:
c3:3a:39:0f:98:d2:1a:02:7d:05:2c:e7:b7:c7:5e:
41:d4:21:8d:ff:c3:ae:56:4d:27:b8:e0:23:60:77:
c7:26:f5:40:c6:bd:94:f6:d9:51:88:3a:e3:f1:83:
5e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CC:83:CF:4B:8B:1B:37:89:FF:E4:EC:44:60:A1:6D:89:EA:32:77
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142287
sbgp-ipAddrBlock: critical
IPv4:
103.167.118.0/23
IPv6:
2001:df6:b180::/48
Signature Algorithm: sha256WithRSAEncryption
2a:4d:38:7b:ad:08:ee:79:48:06:64:c3:de:7f:b2:a9:c9:e3:
9f:14:9d:fc:56:c8:9d:0e:a3:67:5a:61:0b:e9:92:b1:b3:81:
5c:2c:a9:be:30:36:33:88:c0:c5:af:0c:3d:19:48:da:b4:2d:
ac:5b:e4:c3:89:bf:38:f8:4b:c9:cf:ee:63:75:e2:03:19:ea:
d1:4f:fa:35:86:94:99:34:e1:3e:6a:24:da:09:f7:b6:4f:3c:
2b:bc:76:d7:d3:fa:bf:79:5a:fe:38:74:60:5d:74:2f:f2:b8:
80:69:c9:03:bf:b0:ca:4a:81:bf:0b:40:74:75:74:ee:05:95:
16:7a:8d:d5:5b:e9:ca:08:8d:4b:83:43:b8:0b:0f:be:ab:e8:
07:32:dc:7e:33:c8:cc:7c:99:99:b7:36:2f:46:c7:d7:ee:63:
1e:97:f2:e5:f5:55:e2:49:73:0e:85:da:4a:e6:f0:35:9f:fb:
29:d2:23:47:45:3a:dd:67:27:1b:63:b4:86:8c:58:66:69:57:
a0:31:df:42:22:6a:14:90:63:8e:be:08:79:84:7d:d1:63:85:
2d:d7:be:2d:16:a5:5f:0c:67:60:17:5a:ba:d3:bd:2d:9b:e3:
33:9a:16:e7:e3:a6:a9:5d:e3:d9:04:48:96:66:ba:68:4a:9c:
be:58:fc:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:10:14 2025 by rpki-client