Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer
File: stpsovF-3e60xFAzYfTYgigLyog.cer (raw, json)
Hash identifier: Aflm+cWmbwANmJzH9ogvuAp0OlrZntZ1WiYXOagjoEQ=
Subject key identifier: B2:DA:6C:A2:F1:7E:DD:EE:B4:C4:50:33:61:F4:D8:82:28:0B:CA:88
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025522
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 11 Jul 2025 12:46:54 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 135565
IP: 103.66.37.0/24
IP: 103.76.156.0/24
IP: 103.92.131.0/24
IP: 2001:df0:fd00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 04:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152866 (0x25522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 11 12:46:54 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A9122FD2, serialNumber=B2DA6CA2F17EDDEEB4C4503361F4D882280BCA88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a2:93:4c:24:05:98:a3:b8:62:57:6d:0a:55:
9c:7f:dd:d9:61:04:91:46:21:c2:81:c7:15:ca:02:
05:89:62:42:c7:1d:4d:0f:1e:34:11:db:27:eb:10:
86:d0:6f:cb:cc:2d:cf:4e:a8:8f:53:13:b9:9e:28:
bd:1d:f8:84:f4:be:c8:f7:c9:c1:3a:06:d2:c2:8a:
60:9a:6c:ba:e1:2a:70:dd:84:14:29:be:dc:6e:91:
4f:df:a5:94:5e:89:ca:e1:5a:cf:1c:64:8d:73:48:
9c:68:f8:7d:4d:27:fc:ec:f5:76:a6:83:ba:d7:be:
73:45:b5:23:64:db:16:37:35:07:79:04:d9:20:ca:
2b:72:68:e6:e2:1d:53:5f:77:4a:fa:60:48:9a:aa:
e9:71:de:1d:90:32:fc:92:23:98:dd:f6:da:c1:17:
02:de:79:77:3d:77:32:d8:03:e0:99:77:ff:70:3c:
19:4b:8a:82:5e:fe:66:5d:90:2a:0b:d1:81:4c:34:
da:d0:f0:ed:8c:0c:97:88:0e:f5:15:7c:13:e2:7f:
ab:19:72:08:fe:38:0b:35:85:8a:17:35:6b:6e:b3:
9f:99:16:78:1b:74:9a:bc:c2:bb:d4:de:22:bb:76:
9d:c4:c5:46:64:3d:8a:6b:75:da:71:b4:79:be:58:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DA:6C:A2:F1:7E:DD:EE:B4:C4:50:33:61:F4:D8:82:28:0B:CA:88
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135565
sbgp-ipAddrBlock: critical
IPv4:
103.66.37.0/24
103.76.156.0/24
103.92.131.0/24
IPv6:
2001:df0:fd00::/48
Signature Algorithm: sha256WithRSAEncryption
01:5b:57:1d:ac:06:d7:6d:95:98:5c:83:17:ca:e8:59:82:ea:
5c:77:1f:91:1c:28:90:70:09:98:3e:20:d5:73:35:c9:2c:96:
c7:54:e5:b7:ec:44:49:c5:89:51:4f:c2:da:f3:33:23:b9:db:
d1:4d:81:e3:44:79:18:1c:e7:65:b0:8f:e2:c7:fe:9d:36:52:
fb:41:bd:1e:c8:a5:25:b8:50:28:e1:66:45:58:30:18:ce:5f:
db:c6:16:49:6d:84:20:1d:a0:38:7e:03:2e:71:12:71:e1:64:
a8:c1:53:e5:10:c1:5a:32:5d:ea:d5:c1:2c:aa:55:2e:ed:8c:
56:cb:89:dc:d0:ec:6c:25:39:62:a7:bf:71:f5:bc:58:98:2a:
6d:1b:4d:31:6f:d8:33:a2:e7:74:d5:1e:87:8f:cc:48:b1:68:
2f:93:80:d4:77:d3:26:41:89:51:4a:ac:a9:52:ca:ef:c9:23:
22:5b:d8:57:f3:d6:fc:18:d2:02:2d:bd:fb:dc:f4:ea:e8:2f:
af:9f:5e:eb:58:3e:3a:49:14:1d:ec:8a:e5:a4:6a:51:43:21:
c5:75:80:50:c7:dc:a4:82:a6:00:e2:5a:92:9c:10:77:a1:69:
55:4e:97:d0:94:cf:6a:3b:01:2a:78:85:7c:74:3e:1a:11:d5:
84:2b:63:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:45:34 2025 by rpki-client