Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
File: _9C9_G0db07W7Tg5A59B6e3Gb7o.cer (raw, json)
Hash identifier: xjG8moOoS2VAu9APbesTXSsgmm3h4XRWvTYrSFRpoV8=
Subject key identifier: FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024CB2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Jun 2025 18:13:51 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 137886
IP: 103.116.134.0/24
IP: 2001:df5:5300::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150706 (0x24cb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 5 18:13:51 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A919697D, serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:8e:8e:33:3a:b4:20:c6:2b:09:8c:50:36:
bc:2d:83:71:24:dc:89:e5:0b:90:12:cf:b7:a6:4f:
8c:c5:2d:6a:26:16:dd:4a:a9:53:f5:a8:da:c2:b0:
fd:64:e8:40:bd:47:80:75:43:81:4f:db:81:b5:48:
24:0f:c9:72:12:30:84:70:9b:2b:73:89:41:fd:f8:
27:df:7d:de:1e:d2:a3:89:7d:cf:b2:92:89:f8:7b:
c3:f8:eb:5a:27:5a:73:97:de:f5:fd:16:26:4d:61:
fc:03:e3:50:ab:8a:a3:c0:5f:ec:3a:a1:44:6d:78:
c1:a8:8d:7b:8c:1e:42:b6:2f:de:56:3c:57:bf:da:
35:cb:e9:1f:76:2c:9a:83:31:ca:27:1e:d8:66:34:
b9:b2:a9:87:88:f7:70:9d:21:70:c1:b8:95:34:90:
96:c5:04:22:31:d3:ce:ac:d0:a7:cb:cf:f5:76:d5:
f8:d4:f4:01:28:c5:50:a0:08:ef:36:22:e1:37:c6:
1e:c9:2e:b1:1b:4a:3a:fa:57:3b:3b:bb:58:c1:f0:
5a:d8:0f:38:6a:7d:70:1d:1e:47:ac:c8:e5:84:fa:
db:4d:ea:8d:71:67:21:26:88:04:c4:75:87:4b:38:
4c:98:c1:bf:b7:ef:c9:73:64:29:21:df:a4:50:84:
71:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137886
sbgp-ipAddrBlock: critical
IPv4:
103.116.134.0/24
IPv6:
2001:df5:5300::/48
Signature Algorithm: sha256WithRSAEncryption
2b:d7:a6:02:60:6f:e7:10:79:e5:fc:28:ad:d1:c9:2f:4b:53:
a5:9b:86:99:29:e7:32:a2:50:9f:41:4a:c8:1a:74:55:96:a7:
86:3c:6c:51:05:19:de:e7:fc:8a:52:ba:12:1b:95:46:da:ef:
54:1c:c9:f3:0b:c1:ad:59:82:5d:b2:6c:c5:10:d9:ca:0c:76:
18:8d:2a:8c:63:cf:f5:84:b8:d0:fb:19:90:02:1c:61:6f:5f:
97:5c:24:a7:49:3a:cd:0a:36:c3:46:ec:72:60:ea:e5:5f:f2:
e6:7d:94:7d:ac:8c:fd:2a:69:e7:ef:c2:3b:c3:70:74:08:b3:
06:d3:8d:60:70:cb:d5:e1:98:11:04:9b:28:26:a5:1b:d4:ee:
e3:38:a4:3a:fd:3c:f4:46:73:5d:40:95:ca:0b:bd:93:d2:14:
ed:d4:78:a5:51:75:8a:db:01:1f:1d:89:27:25:0b:db:2d:2e:
5b:5d:b1:fc:6e:d8:c8:9d:3e:f2:d4:96:40:67:80:4f:89:35:
da:bd:bb:7a:9c:44:e8:6d:9c:a4:72:53:af:7e:da:fa:c4:ad:
4e:0b:82:10:75:3c:4a:2f:36:0b:ff:36:19:32:16:81:6b:23:
4d:63:a3:4b:97:71:83:e2:6e:ef:57:01:54:99:69:76:97:61:
9b:22:19:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 14 04:28:13 2025 by rpki-client