Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer
File: TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer (raw, json)
Hash identifier: FD30tz75htA/HgzDHYHmeJ0zZCDbFJp6RI0n61Xx62A=
Subject key identifier: 4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024B55
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Jun 2025 19:13:14 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 139206
IP: 103.139.206.0/24
IP: 2001:df0:9180::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Jun 2025 22:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150357 (0x24b55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 2 19:13:14 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91CE813, serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:01:78:fe:e9:ca:db:dc:4e:df:ab:58:2e:
f3:99:62:90:36:1e:46:44:cc:2f:fe:28:10:ad:cd:
28:1f:b5:2f:56:f6:96:61:19:c3:5d:dc:a2:7b:62:
8e:d9:c9:56:64:c1:6c:50:48:04:fd:01:e9:6c:38:
62:e6:93:10:f8:63:f7:97:63:70:e3:50:e0:71:f4:
41:c8:76:c3:0a:9a:61:a9:ba:cb:96:50:2e:c8:00:
61:47:19:9b:c2:b8:5c:51:7b:49:1c:c7:dd:ef:19:
5d:53:34:2a:60:ce:ce:e8:ea:69:39:4d:24:9e:6a:
ed:be:a4:c2:4f:b9:72:e7:8e:7b:00:28:11:59:63:
36:54:a3:bf:3d:33:43:f7:b9:1e:19:15:fe:c6:f8:
69:5f:d0:3d:98:27:c5:b5:55:56:b4:d1:ea:96:0f:
e3:72:f6:39:db:e5:29:7b:af:50:4f:9d:07:4b:31:
4a:0f:c0:f6:05:95:f3:89:fb:97:e8:cb:fb:52:e8:
74:ab:72:11:71:f8:56:42:76:2e:6e:6b:72:9a:35:
c9:9c:6e:a4:e4:e4:85:2f:78:6a:ba:7e:58:7f:f1:
7a:48:68:46:fa:a6:a3:aa:70:40:e7:92:de:d2:ed:
9e:f2:4d:e6:d1:bc:f0:21:c1:f5:ac:35:a6:c4:7a:
c1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139206
sbgp-ipAddrBlock: critical
IPv4:
103.139.206.0/24
IPv6:
2001:df0:9180::/48
Signature Algorithm: sha256WithRSAEncryption
00:1f:2d:22:b9:6a:07:5c:a1:93:41:6b:25:64:14:ed:cc:c9:
f9:4c:a1:59:ba:d3:b4:32:ff:61:6a:cd:83:f0:82:9a:27:d3:
3c:bf:a7:43:dd:da:a3:2d:a2:e7:2d:91:8d:38:d4:e1:5c:0a:
e5:a6:6b:b6:b8:4a:3a:fb:bf:f5:26:0d:9b:59:1c:e1:6b:f8:
0c:6c:79:35:cb:11:79:fe:79:20:0e:07:73:18:d9:4e:4b:f8:
f3:e2:f8:bc:d5:82:38:d8:5f:79:6f:99:a3:e0:ac:ef:31:89:
9d:d5:69:a9:8b:fa:08:30:e7:74:e4:2b:5f:60:98:55:25:91:
09:71:c5:e5:f7:f9:9b:01:6d:d0:49:34:38:78:27:f2:13:4e:
b4:f5:3c:93:7e:ef:27:75:57:c3:c5:61:11:47:98:b6:84:ce:
4f:02:ca:cd:56:16:42:2c:a9:9a:18:e4:0a:ce:f3:92:06:a1:
63:2c:c7:55:36:ab:ce:ea:54:ab:03:78:ed:dd:2a:e2:f7:66:
c7:b6:c3:74:10:57:0a:78:bc:d9:d4:e4:43:37:98:21:a2:27:
6d:17:c3:96:c9:d7:45:93:c1:9c:14:ab:ae:b0:14:c0:59:b5:
f8:c8:ac:98:48:51:2c:ff:b1:bb:76:de:96:de:5f:fb:1a:61:
fe:73:8b:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 14 04:12:18 2025 by rpki-client