Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
File: iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer (raw, json)
Hash identifier: kOGHwsYemcjCMI3x7J0m7DrnYTldTNLx9rhg+DaLjfI=
Subject key identifier: 88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025883
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 28 Jul 2025 20:25:45 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 137923
IP: 103.117.81.0/24
IP: 103.119.34.0/24
IP: 2001:df5:a500::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153731 (0x25883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 28 20:25:45 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A919821D, serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:e5:05:83:8c:cd:5e:b2:36:a8:6b:17:a7:
63:a2:5b:05:bc:3c:8a:ab:87:07:9d:da:5f:ef:d8:
d5:59:d4:6f:97:91:42:30:71:b0:c7:ac:b8:70:e0:
86:62:69:dc:db:af:fe:a7:69:93:ff:50:00:4f:22:
25:6f:4f:81:0d:60:7b:f2:5e:06:d5:bd:98:96:07:
45:25:38:92:0e:53:1f:1b:c4:13:16:3d:3a:ae:ad:
5e:89:38:fb:00:ac:c8:5e:71:94:41:af:23:46:dd:
8c:07:96:94:a1:6d:d9:89:97:09:d8:29:e2:aa:20:
e0:d7:d9:69:89:ac:6d:08:28:1f:a5:31:a4:cb:26:
28:0e:b9:df:e0:51:32:75:8d:73:b8:fb:48:70:49:
33:54:4a:22:9a:ab:b5:9f:0e:f5:2f:e4:0f:68:4c:
19:8a:36:46:46:ac:3b:fc:bf:98:bd:60:9a:88:ae:
5b:55:cc:4e:a6:49:5a:a3:c6:c1:1a:df:1f:f5:e8:
cd:bb:1e:34:b3:fc:2f:2f:3b:e7:c7:c1:f3:55:97:
92:52:77:fb:3a:a3:61:2a:66:74:6f:6b:4b:e1:98:
63:b4:ec:92:19:4a:f0:66:1c:96:dc:2e:74:b3:f4:
84:14:87:d9:4e:2e:9b:c4:26:02:7e:15:4b:02:8d:
d3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137923
sbgp-ipAddrBlock: critical
IPv4:
103.117.81.0/24
103.119.34.0/24
IPv6:
2001:df5:a500::/48
Signature Algorithm: sha256WithRSAEncryption
79:6b:16:39:c8:f7:d7:a4:02:3a:09:6e:42:80:93:93:5f:95:
ab:15:ff:b2:3a:ba:da:e3:05:bc:c9:82:4b:f8:2b:f7:51:dd:
da:50:36:a5:ed:da:a3:f6:e5:0e:9a:dd:8c:0a:0f:c3:2c:29:
4c:97:9b:52:1a:57:b6:49:a9:ad:b2:b3:f7:cd:cb:8e:13:54:
c7:2a:7f:35:67:1f:1f:7b:9f:0d:00:a2:37:65:16:5b:bb:70:
3b:61:09:cc:37:cb:34:ec:9e:e7:0a:99:80:14:8b:83:11:4b:
d3:f0:e9:b0:f8:70:79:59:79:cb:5b:2e:b3:65:29:8d:88:ee:
33:49:3c:8b:27:73:e5:2e:58:d2:e2:b0:d5:73:96:72:f4:31:
a8:4c:49:94:82:2e:ed:49:12:68:83:59:69:36:e3:bf:a5:e8:
6f:0b:6c:58:0f:39:95:0f:9b:52:77:02:d4:fb:25:f0:b0:f8:
7d:c3:f8:22:37:a2:29:a2:bb:09:42:7d:2d:55:94:d1:e7:80:
21:70:8f:a4:15:bf:de:83:c1:ca:55:82:de:7b:cd:c8:78:04:
10:96:ed:ed:f2:ec:8e:3f:4d:de:93:f1:76:cc:8a:b2:b8:7c:
ea:23:f9:6f:73:06:c2:85:a3:72:e4:8e:4f:fe:96:6b:01:bf:
3d:24:2b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:45:29 2025 by rpki-client