Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer
File: tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer (raw, json)
Hash identifier: mN+6p9CZP7bBq5j37gAEAB4bH4bqKEuPgyC5KNs3uuI=
Subject key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02595A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 31 Jul 2025 08:02:31 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 154103
IP: 202.1.28.0/23
IP: 2402:1e20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153946 (0x2595a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 31 08:02:31 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:3d:44:3b:7f:7a:46:7f:8c:4c:3d:4f:03:
b1:2d:50:91:a6:0d:1e:4c:bc:6e:d0:a0:91:7a:96:
28:a0:78:7c:23:a5:4f:66:a5:d3:bc:eb:78:09:73:
50:26:05:c7:28:57:10:36:b9:7c:bb:55:ea:fe:a5:
da:09:a3:1b:c8:3a:6d:15:32:6a:d7:55:a3:fd:f6:
e5:c3:22:da:f5:49:ca:89:ba:d5:64:4e:12:92:5c:
83:dc:b7:7c:09:e2:5b:d6:bc:e7:96:a8:cc:de:bc:
78:a5:7b:0a:93:3e:a8:7f:69:99:7e:19:04:72:fc:
a0:a0:f8:e8:15:cc:b3:af:f5:9b:85:b4:e0:54:ad:
e0:e7:21:6c:f1:76:fe:64:cd:69:ef:17:5d:32:84:
00:45:4b:71:70:74:ba:45:e3:33:e8:9f:f7:be:6c:
9f:49:13:bf:dd:1b:a3:af:da:39:d6:64:14:d7:a4:
9b:f4:cd:89:c0:f7:f0:0a:f2:d9:0b:31:36:87:6b:
75:ff:3e:83:fb:77:1e:9d:37:ec:29:3c:28:81:ca:
d7:57:a2:70:6d:f1:cd:4d:ad:a1:6e:66:40:78:40:
be:1e:5b:e0:17:0b:90:3d:71:d4:fb:ea:40:03:96:
d6:d2:18:e4:90:fa:e6:a5:b1:db:9d:f8:f5:7d:7c:
41:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154103
sbgp-ipAddrBlock: critical
IPv4:
202.1.28.0/23
IPv6:
2402:1e20::/32
Signature Algorithm: sha256WithRSAEncryption
72:3d:7c:4b:af:c8:6c:7f:3e:96:71:a4:d3:ff:db:d8:9e:a0:
2c:fb:6b:a4:7d:7b:18:f8:37:47:af:3c:08:11:df:3e:9d:e4:
2e:a4:fb:2c:62:8f:22:41:40:91:aa:1d:1a:ba:30:1d:eb:64:
50:ef:79:c1:61:64:b5:78:e4:f4:c8:77:37:b7:79:ba:d8:44:
a2:33:f8:80:48:35:8a:4e:57:68:fe:6c:1f:11:ac:ba:36:c5:
3b:66:78:18:54:f2:2b:48:9c:d4:b8:eb:09:f3:2b:82:bf:51:
3f:cc:30:b7:6d:46:9f:b6:85:4e:37:f0:4e:ab:b9:2d:33:41:
ab:58:4c:d7:6d:80:e0:f2:51:92:b9:28:d1:15:ca:cc:d8:a5:
9d:d4:64:f5:09:c9:68:94:26:ec:29:0a:f8:44:97:87:c1:0b:
70:e1:d5:6a:ba:6e:23:86:ad:15:17:bd:b5:6a:a9:40:e5:ba:
6e:ec:1a:44:90:cf:98:0b:69:f7:f0:33:9c:69:fd:a2:8e:b3:
ca:dd:c1:08:8d:76:78:5d:2b:2b:dd:2d:c9:b3:68:a3:ea:5e:
a9:04:92:3d:51:71:71:29:af:ce:ad:8d:b4:c7:de:5e:d7:62:
20:a2:76:af:a2:2b:5b:a0:f3:f2:0f:3a:29:b7:75:b5:6f:fa:
5d:1c:c6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:51:07 2025 by rpki-client