Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OWpdnmemeQypf7kxMEtE57CoIc8.cer
File: OWpdnmemeQypf7kxMEtE57CoIc8.cer (raw, json)
Hash identifier: K+v/hZs5BafsC3s7qUNGCzzGyQ4IUgx9Ts0mptlT5RM=
Subject key identifier: 39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025727
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 22 Jul 2025 16:40:37 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 139054
IP: 103.151.180.0/23
IP: 2001:df3:f980::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153383 (0x25727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 22 16:40:37 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A915664E, serialNumber=396A5D9E67A6790CA97FB931304B44E7B0A821CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:b1:26:3e:e3:8a:11:24:ed:19:b2:0f:10:
7b:60:95:56:b0:8c:8d:fc:ba:05:fd:1a:64:77:05:
7d:e1:a3:81:28:c8:73:81:8b:0c:a8:fb:41:ac:80:
79:ca:1d:8e:92:d7:d0:ea:26:ae:80:27:50:7e:d2:
0a:05:e8:2d:96:58:15:30:8f:d5:8a:33:d0:14:7b:
e3:64:92:cb:95:72:bd:44:4e:64:4b:db:63:d5:7f:
93:a3:ed:fc:ef:6f:85:33:8c:09:71:ca:fe:12:d7:
25:fc:51:29:af:dc:2d:f5:d2:4a:6e:15:6c:a7:0c:
c7:36:25:57:68:2c:d9:5c:e9:ec:be:40:f8:c0:ae:
f2:9d:10:7b:9d:34:60:11:80:5c:58:37:f6:49:f0:
a4:a4:d0:81:7b:20:b2:d0:78:0d:81:87:55:47:c6:
28:d5:0c:dc:91:ab:4b:a9:67:d8:54:45:ed:b7:a3:
4f:39:c9:38:7b:1e:8f:49:e1:7f:3b:40:47:24:90:
8c:87:57:fb:55:56:68:03:01:4d:a8:7a:2a:d7:f9:
4d:b5:7b:c5:66:af:03:ad:fc:b0:37:5d:9f:b9:31:
c2:ae:32:d5:47:21:d9:d6:d8:48:62:ae:7f:e2:29:
cd:d3:e7:1a:60:21:9b:03:c2:68:ab:a0:7f:b7:f6:
19:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6A:5D:9E:67:A6:79:0C:A9:7F:B9:31:30:4B:44:E7:B0:A8:21:CF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915664E/B46A9C1EB13D11EAB12D121CC4F9AE02/OWpdnmemeQypf7kxMEtE57CoIc8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139054
sbgp-ipAddrBlock: critical
IPv4:
103.151.180.0/23
IPv6:
2001:df3:f980::/48
Signature Algorithm: sha256WithRSAEncryption
31:b9:e2:9c:90:20:84:89:7e:a3:39:e1:b8:b8:6f:21:81:5e:
00:76:c0:c3:c9:56:c9:56:73:02:db:c4:ba:98:d4:08:b2:13:
64:a5:e2:10:c7:ce:9a:f9:42:b5:f9:66:91:90:43:68:13:93:
df:8a:29:f2:bb:03:c3:14:b7:53:d1:8d:0a:2a:4e:80:e5:89:
46:94:0f:0e:62:83:8e:ab:82:91:1b:a5:9f:8f:ab:33:b4:39:
d5:8d:f2:e9:d7:5e:6e:2e:28:62:bf:42:b1:d6:63:a1:4d:0c:
e8:3b:c8:d7:40:d9:8f:e1:38:70:87:2d:b0:ef:50:68:3f:1c:
81:96:85:85:a8:eb:58:de:c3:e6:0d:d8:66:5e:fd:b6:ba:c3:
c5:03:9b:29:ae:53:bc:e3:3a:be:d2:d9:1e:51:08:f0:3f:3f:
0a:79:7f:ff:4f:aa:19:84:e7:13:7e:c7:c6:6d:dc:bc:39:e9:
e5:b5:40:71:ad:0f:d5:02:fb:f2:dd:f2:c0:21:9d:0e:fb:3a:
45:89:57:04:9e:ae:91:37:ba:c1:5e:38:83:a2:cb:62:d2:60:
25:f7:b1:a8:ce:af:17:d9:1b:af:74:6f:f2:81:35:05:fa:57:
c5:e5:ca:8c:6f:f4:3e:b0:0f:1f:b5:71:b1:d8:6a:d8:ce:bb:
2d:83:cb:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 10 21:07:42 2025 by rpki-client