
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer
File: V1jTgx6S-ugkdfazMhJ5Sh_wfl8.cer (raw, json)
Hash identifier: YMbgI2bV7w5I6WE9o0DhqVMQyfhbJ+2Mx/bb+g732nw=
Subject key identifier: 57:58:D3:83:1E:92:FA:E8:24:75:F6:B3:32:12:79:4A:1F:F0:7E:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0254B0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 09 Jul 2025 17:49:21 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 137824
IP: 103.115.14.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152752 (0x254b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 9 17:49:21 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A919536D, serialNumber=5758D3831E92FAE82475F6B33212794A1FF07E5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:79:3a:42:e6:33:47:92:09:3e:2a:f8:1d:
0d:72:b2:2c:18:91:a7:9b:0c:6d:f9:33:f5:ee:36:
a4:0a:24:4b:ab:a5:76:9f:9c:83:de:7b:fd:8b:46:
44:9b:ba:f1:a8:9d:49:44:90:14:e4:24:50:e1:0f:
3c:0e:dd:46:aa:a7:48:e9:5e:b8:f1:39:b4:f4:5c:
f5:9d:d8:10:6d:8c:bf:81:43:c1:11:54:81:5b:fd:
58:84:c2:bf:d0:44:07:6b:7d:88:28:36:f8:f3:8b:
aa:e6:f7:60:04:2e:08:30:af:3d:59:7b:07:20:f7:
50:20:95:3b:57:d5:f2:93:03:bc:56:ac:e2:88:b8:
73:2c:24:e0:34:86:fa:0e:94:c7:d6:91:91:07:58:
44:89:61:a1:b9:aa:f2:70:28:64:c0:f4:c3:32:c8:
36:14:24:8e:9e:64:ff:29:5e:42:be:0f:5e:c2:50:
d5:f5:dd:63:47:d8:8a:0c:f5:f1:87:36:d9:04:4f:
88:d5:3a:bd:30:93:19:9a:c4:d9:7e:ce:1b:89:d0:
63:d1:be:c1:61:1f:58:b7:aa:a3:1c:2d:e8:ad:05:
3d:9d:77:f1:04:0b:96:0d:53:ed:6c:b5:a1:51:32:
a1:63:21:37:de:e6:d3:1f:d8:ba:52:a4:95:e0:92:
c9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:58:D3:83:1E:92:FA:E8:24:75:F6:B3:32:12:79:4A:1F:F0:7E:5F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919536D/C1851FBE6E2311E8817DCB75C4F9AE02/V1jTgx6S-ugkdfazMhJ5Sh_wfl8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137824
sbgp-ipAddrBlock: critical
IPv4:
103.115.14.0/23
Signature Algorithm: sha256WithRSAEncryption
43:28:28:f5:79:48:d1:02:0b:8e:a3:cb:aa:57:2c:25:44:a1:
5f:7b:43:6e:ee:d3:a9:06:45:72:5a:c0:1f:9a:75:5c:9f:40:
08:85:c0:85:8f:ac:81:ce:5b:c7:27:45:f4:07:4e:95:1c:2a:
1a:67:9c:a2:f3:3d:94:17:46:5c:d3:bd:07:5a:e1:b2:a1:31:
5e:80:67:8b:4b:b1:9d:d2:5f:10:5d:94:df:11:92:3c:94:8a:
4d:31:0f:a8:a5:86:fa:3b:33:a9:eb:b7:06:e1:a2:4a:d8:e3:
04:60:d9:5e:b2:65:2c:ba:9e:68:96:be:2b:df:fb:60:d0:23:
bb:83:93:99:e5:f6:db:6d:de:03:50:ae:1e:34:e8:6a:45:33:
25:81:c3:8e:da:33:19:62:12:a3:8d:99:8a:4f:6d:8e:d4:f0:
54:77:c1:15:ef:08:07:f9:37:e7:a9:2a:2c:ef:fd:68:90:66:
7e:66:9e:53:ad:10:ca:fd:c2:60:41:eb:c6:26:16:2e:a7:8d:
f4:97:e4:89:3d:e7:ae:f1:5b:63:30:e9:67:79:08:ef:0e:58:
b0:79:1a:69:c9:3a:17:0d:b1:90:c1:19:28:90:c1:6f:c2:a6:
b0:39:2f:3e:5c:dc:09:c0:b3:e1:09:0d:4f:b4:84:fc:6c:db:
60:a8:19:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:11:24 2025 by rpki-client