Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer
File: TPa6KUJsvCB032LFH683jELTuK8.cer (raw, json)
Hash identifier: kNDn5WLelR4d3ffe48Qp0SWi21PHCb2lM3q7qaL5KYY=
Subject key identifier: 4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02596E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 31 Jul 2025 14:59:35 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 131226
IP: 103.37.200.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 Aug 2025 11:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153966 (0x2596e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 31 14:59:35 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A9148F50, serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:41:eb:37:19:99:31:9c:69:94:47:b6:09:
1d:ed:44:10:b1:fb:8d:94:29:17:6d:87:31:7f:59:
2a:6a:b0:86:b1:8f:b1:60:61:1d:11:e6:00:3f:64:
48:2a:f0:fb:3b:e0:23:86:96:21:23:e7:f0:79:27:
a4:ca:f6:7e:2f:19:5f:e9:72:f7:8c:80:97:cb:00:
86:95:50:3e:66:9d:01:f4:28:76:f1:c6:f8:3e:4f:
9e:fe:91:44:06:c4:77:12:f5:c6:b2:e7:a8:bc:4b:
a5:b4:ab:f3:e2:51:63:67:6d:e3:53:24:c3:d9:53:
9a:95:36:2a:78:e1:5b:d7:f4:9c:0f:31:dd:a8:e8:
0e:a1:bb:cb:e9:c1:6e:09:d6:5f:0d:bc:77:a2:af:
69:03:56:28:66:2f:b1:39:40:8a:b1:a3:d0:33:89:
28:47:df:a9:77:3f:78:4d:53:56:46:3a:e4:33:5e:
2f:73:7a:42:75:ea:6c:de:92:de:46:f2:bc:48:dd:
45:7e:d8:6a:f7:a7:77:13:6d:ae:bb:ed:6f:82:ca:
cd:75:5c:1c:d3:68:07:b5:53:ed:9f:f9:36:ce:af:
e4:25:a0:14:14:a2:0e:c7:d2:5c:52:c5:0d:bb:08:
6e:da:92:f4:8b:10:5d:f9:ea:27:37:f9:e1:e7:a2:
f1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131226
sbgp-ipAddrBlock: critical
IPv4:
103.37.200.0/23
Signature Algorithm: sha256WithRSAEncryption
da:76:13:a4:4d:f8:43:15:01:57:f6:e0:0b:20:da:36:c9:b1:
97:84:91:74:7e:2a:d4:6e:85:02:42:70:eb:01:a2:e1:d4:dd:
30:26:b9:ff:68:d4:7d:aa:0f:00:c7:ca:f5:c3:2b:56:ee:00:
fa:3f:79:2a:2d:c9:d7:d3:d9:a6:45:da:05:8c:9c:0d:af:b9:
11:a1:f5:b8:36:3f:3c:98:39:9c:16:59:3c:cc:73:fe:36:fe:
c6:67:18:0f:57:5a:da:ec:f5:6c:e6:db:b4:07:c7:a7:69:91:
d2:56:1e:8b:89:fd:bb:eb:61:cc:c4:33:e1:d9:23:95:53:c6:
27:e5:f3:12:83:3e:bc:61:6c:ee:ae:b9:22:27:7f:d5:5d:6a:
6c:c8:36:f2:3e:d2:34:57:8c:5c:cd:9f:fc:e2:2d:4a:2a:54:
8e:73:52:c0:b3:ce:75:41:74:c3:a9:bb:50:79:be:2d:09:63:
7f:06:7a:62:8a:04:24:ed:a9:b4:98:ed:52:83:22:e1:13:f3:
51:26:e1:65:20:a8:d3:aa:44:09:96:c8:50:50:f7:f6:c3:60:
fc:6a:b2:96:1d:cd:af:2f:ec:07:49:7c:04:d4:66:f2:26:33:
be:71:79:41:de:fb:d4:a0:a1:f0:e2:92:a6:a0:50:19:1e:54:
b9:85:55:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:18:38 2025 by rpki-client