Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer
File: dS97SFPDqcnwf9naxduWq37y398.cer (raw, json)
Hash identifier: 2RlxvwH9tQVYTGGIEReaV1m8HwkjXh9GZXbEb6BuzOU=
Subject key identifier: 75:2F:7B:48:53:C3:A9:C9:F0:7F:D9:DA:C5:DB:96:AB:7E:F2:DF:DF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024BC9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Jun 2025 14:07:02 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 140846
IP: 103.152.98.0/23
IP: 2001:df4:880::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150473 (0x24bc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 3 14:07:02 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A913979C, serialNumber=752F7B4853C3A9C9F07FD9DAC5DB96AB7EF2DFDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:90:28:e6:26:91:32:17:88:65:87:56:2c:
40:e1:71:93:ab:84:aa:bd:92:1c:e8:e3:5f:f9:07:
44:c0:a2:60:fe:d6:8f:93:32:49:82:c5:9d:2f:fb:
39:e6:57:eb:e3:7f:e5:93:a9:7b:c8:1e:c5:32:54:
04:b5:ee:a9:0a:98:bd:5b:15:d0:fc:ff:ae:68:ac:
c2:b0:5d:4c:c6:26:8a:87:2b:9d:51:0b:a4:2f:86:
2a:df:cc:fe:f0:d0:39:26:49:b3:17:cf:9d:47:c1:
1a:c6:6c:d9:74:2e:8b:bb:29:07:70:f3:05:64:fc:
f4:41:46:53:64:91:46:04:2b:06:41:89:09:4c:84:
ea:83:cf:98:e5:25:a6:2f:b5:cf:29:eb:01:65:e8:
06:20:59:41:92:37:40:75:74:71:98:19:2d:80:25:
dd:d2:67:9f:c6:de:6c:97:4f:52:4d:fa:25:ed:eb:
e6:23:83:4d:60:ac:35:b9:dd:fa:96:60:b9:09:bf:
21:c0:ed:2c:17:2b:d4:c0:09:0d:d2:dc:32:4d:45:
b1:66:64:dd:74:a2:7b:69:20:a9:09:60:3e:cb:e4:
cf:5c:63:eb:c0:e9:fa:16:00:ca:8a:6a:48:34:2d:
4f:a0:1c:f5:71:57:10:cd:6a:e2:01:f3:84:e2:8f:
9d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2F:7B:48:53:C3:A9:C9:F0:7F:D9:DA:C5:DB:96:AB:7E:F2:DF:DF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140846
sbgp-ipAddrBlock: critical
IPv4:
103.152.98.0/23
IPv6:
2001:df4:880::/48
Signature Algorithm: sha256WithRSAEncryption
a8:33:3c:49:0c:4a:3f:5c:f4:52:11:92:c5:a0:2a:ab:07:ac:
78:b6:b5:d4:5f:44:dd:87:78:c5:0e:a1:12:3e:e8:23:42:ed:
02:59:11:47:0c:fa:e6:e8:c3:67:91:68:48:a2:cb:87:f6:91:
aa:9b:33:5a:91:db:57:22:bf:8b:4c:b7:a3:df:74:80:4c:02:
5a:9c:1f:61:7a:83:78:7e:a3:dc:22:5e:38:f7:d5:98:16:08:
18:10:c9:53:1d:0e:b2:8d:0b:d6:0e:47:8d:2b:d7:1e:08:79:
a4:24:e2:f7:30:a5:61:c5:cb:5a:42:cb:e6:82:0b:f0:0a:ef:
f4:9a:38:27:9a:fe:9e:d9:e5:5c:cf:ad:04:dd:a9:46:82:88:
87:12:c9:49:73:68:43:49:f9:61:64:f9:2b:ec:d0:ac:b2:40:
6d:05:3e:b8:45:8e:2c:7b:80:54:43:2f:2e:10:67:d3:d1:22:
ca:7c:ef:47:b3:67:1e:c7:5e:e0:08:74:dc:5c:95:e7:b6:45:
57:da:3e:d2:3b:34:21:bb:85:fd:9c:73:8a:2a:7e:1b:1a:fe:
89:27:76:54:a5:65:62:d3:24:58:70:7b:51:71:54:4d:c3:f9:
e6:a2:12:49:48:d0:a1:98:85:16:bc:fc:5d:56:00:42:51:be:
4f:f3:41:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 14 04:55:15 2025 by rpki-client