Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer
File: ZH6czEtpiBWTjDs2e84wggMOI0c.cer (raw, json)
Hash identifier: Vgq5YHaN+tjnTNwnZOGQsxa5X93uL1Tb8qY1vwq/V9A=
Subject key identifier: 64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025AC3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 03 Aug 2025 15:40:19 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 150135
IP: 103.191.174.0/23
IP: 2001:df1:7c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 Aug 2025 04:46:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154307 (0x25ac3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 3 15:40:19 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A918216E, serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:b9:03:42:06:b1:22:b1:01:9f:c6:af:57:
69:85:19:92:39:75:be:1e:85:14:d2:91:a2:d6:e3:
10:25:fe:1a:84:d8:e5:23:12:37:e1:1c:77:3e:d4:
9e:3d:2c:05:9f:d6:98:c0:6b:a4:74:34:eb:12:b5:
8d:b9:45:41:6b:38:3e:7f:79:7d:7d:fb:23:a9:3a:
c5:d5:8a:9e:02:56:01:c3:85:02:fe:77:d8:2d:34:
ea:94:36:8b:4d:43:4b:7f:4a:9f:18:03:d6:8d:41:
75:ba:7e:b0:cf:be:d9:d1:d7:59:31:4e:65:b4:f4:
e8:05:cf:2c:6e:86:ad:e0:48:88:eb:83:2e:55:4b:
64:57:30:6d:b0:1b:92:c0:1b:19:00:35:5a:fc:2f:
08:3a:05:d0:eb:95:a1:e0:67:c3:c2:9e:b8:05:9e:
03:0b:00:1d:5b:31:c8:5b:f9:9e:63:f6:50:dc:aa:
3f:7b:c5:b5:5a:1d:1b:e6:b9:4a:96:2c:48:0b:98:
9f:a6:0d:67:69:2f:e2:85:3f:78:d6:54:01:7a:26:
fe:5c:95:17:53:95:c7:41:86:1a:0a:63:af:b8:1f:
a8:f4:36:fe:36:12:d3:b4:dc:49:5a:7a:b8:17:13:
92:de:ec:c9:fa:c4:6b:c9:1a:a8:58:d0:88:e9:58:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150135
sbgp-ipAddrBlock: critical
IPv4:
103.191.174.0/23
IPv6:
2001:df1:7c0::/48
Signature Algorithm: sha256WithRSAEncryption
93:8d:92:0f:60:7a:68:49:87:fc:a9:e4:4e:9b:2e:4a:93:99:
6d:da:04:37:75:e7:06:be:a8:d9:0b:cb:02:d6:3b:00:f9:9d:
ee:dc:ee:c0:f3:2e:49:86:ac:7b:6d:2d:22:b6:76:23:4f:e3:
05:df:39:9a:49:86:f3:af:9c:8b:d3:0e:dc:ac:87:b1:2a:9d:
68:5e:f1:0e:7d:4b:02:1a:2c:47:3b:ee:be:00:36:46:46:7c:
3f:34:bf:44:c1:e5:99:e5:ff:b8:ed:93:c8:bb:1c:bf:4b:46:
e8:23:94:7e:ae:2e:59:2a:fb:72:92:da:99:55:df:12:e8:68:
bc:df:20:fb:5b:d4:77:a8:2c:d1:35:50:f2:02:73:6f:8c:e7:
fa:b3:01:a0:41:d4:62:de:7b:1d:7c:de:d2:30:32:04:3d:5c:
58:08:c4:e3:08:97:4d:28:8b:ee:79:bc:98:1a:33:21:6d:bd:
b8:70:85:5b:31:46:1c:e6:fe:6e:a0:33:16:45:a0:4e:cc:c3:
53:c4:23:39:92:0a:69:7a:2d:8d:17:f2:98:ce:20:a4:36:11:
a6:52:0a:45:97:46:6f:c1:41:e5:52:8d:62:a7:ae:2b:cf:91:
1c:7a:d4:7d:fa:59:40:59:5e:1a:d5:69:25:e7:89:38:0e:a1:
11:4b:18:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:18:56 2025 by rpki-client