Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
File: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer (raw, json)
Hash identifier: 4UKJx5EV629PBpQOmvSWXOLapHuTeCgs9UhA8zyMQJU=
Subject key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024D3F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 10 Jun 2025 00:05:28 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 142406
IP: 103.167.214.0/23
IP: 2001:df6:c180::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150847 (0x24d3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 10 00:05:28 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:14:3f:79:1b:cc:37:00:ef:c4:cd:f1:d4:6a:
dc:ec:26:01:9b:92:83:f2:84:69:76:0b:37:b8:a8:
e0:05:97:d5:25:73:a7:36:95:e1:ff:4e:13:33:f4:
1b:90:77:01:d9:cc:a1:c4:4f:48:93:82:0a:fb:cd:
8e:54:b0:65:c3:d0:a0:88:80:9a:ce:de:ec:de:eb:
03:94:c3:23:e1:e1:0b:e2:3a:d0:12:43:6b:99:28:
d3:dc:01:ad:6f:be:12:dc:c0:44:08:f0:db:06:6b:
d7:28:57:df:5e:fb:51:c1:26:c4:e5:2d:f1:18:65:
a5:e6:4d:dc:50:15:58:d3:bd:02:61:b4:42:e5:cc:
e6:1b:f9:46:14:8d:5d:ae:60:7a:5c:8c:0e:76:6d:
b0:16:cc:ca:60:14:ef:f3:d9:a4:67:cb:53:1d:e3:
e3:e9:86:64:d3:f0:df:c4:4b:fd:cb:3f:80:08:2c:
b8:e2:bb:f0:61:10:f0:fe:1c:93:8a:98:33:da:60:
fe:86:40:81:40:b2:0b:ad:c7:54:cc:ae:9c:94:4f:
0e:30:13:89:c0:b0:f3:70:c2:c0:03:7a:3a:e1:c4:
00:24:36:33:d2:39:8b:dc:3c:76:01:e5:2e:4d:83:
aa:e1:2c:b9:86:af:18:87:9f:e2:19:f6:df:4f:f8:
a8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142406
sbgp-ipAddrBlock: critical
IPv4:
103.167.214.0/23
IPv6:
2001:df6:c180::/48
Signature Algorithm: sha256WithRSAEncryption
26:98:5d:fb:87:19:76:ca:74:32:e3:fb:9c:30:9f:d0:63:94:
ee:36:07:71:5b:9d:c3:47:33:51:86:41:68:43:d3:e9:e9:62:
73:42:15:4f:d7:89:ec:9c:90:4f:1a:29:2c:1f:b4:de:53:73:
d9:09:24:aa:b0:45:0f:57:60:c8:41:30:13:9f:f4:e5:d0:3c:
e6:c9:69:82:4f:7a:e4:d4:6e:c9:8c:86:a8:37:16:0c:08:01:
cb:45:77:f2:54:41:76:70:4a:a2:1b:65:64:76:c6:43:f7:fd:
f3:c6:74:d2:2e:93:14:89:aa:d7:d3:99:26:ad:b0:6a:66:d8:
6c:03:77:44:0e:58:6c:e0:21:32:d3:b3:60:22:8d:48:6f:eb:
d3:bf:df:a0:0a:04:ca:cd:90:b0:e6:8a:43:21:f9:fe:3a:a2:
bd:dc:58:3a:43:36:c7:ae:cd:44:2e:35:9d:3c:c4:a9:37:5b:
f0:b4:93:93:87:e0:37:da:4e:f4:16:92:df:fd:fe:8b:39:c7:
0c:63:5c:a5:27:05:3f:77:59:9e:f1:8b:3e:d9:d7:15:69:8d:
ee:82:a4:35:6c:03:65:18:81:69:ee:32:0c:d6:e5:d4:95:8e:
dd:9a:e3:96:99:9c:95:57:c2:d9:45:ae:83:82:23:ab:33:1b:
2f:90:98:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 14 17:37:12 2025 by rpki-client