Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer
File: uRm6CzrV4m_DHTlL4TK7yof8yFI.cer (raw, json)
Hash identifier: vo1MRWhyIk5Jjwunbk8f55M4PX4pl6SlL3KZWK1+bwA=
Subject key identifier: B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0254B3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 09 Jul 2025 18:37:53 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 150165
IP: 103.143.236.0/23
IP: 2001:df1:24c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 03:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152755 (0x254b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 9 18:37:53 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A919E4C6, serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:d2:01:b4:10:64:15:f8:51:7f:d6:26:13:
33:73:2c:50:df:b5:c4:e7:98:51:5c:65:34:48:30:
76:13:9c:92:b5:40:90:76:43:d3:ba:2b:b9:cb:a5:
90:66:5c:d2:aa:3e:c8:f3:cb:84:41:e3:c8:4d:79:
b3:6a:55:44:fa:31:df:24:f2:b6:b4:c1:75:29:15:
cf:2a:4d:36:3d:89:2f:67:94:41:92:53:a6:62:e8:
81:ac:d0:81:ba:b5:00:db:31:4d:19:3e:41:0d:50:
36:c3:09:c6:cc:63:b1:ee:98:f4:0c:a0:60:0b:15:
a3:69:2a:75:d8:80:49:11:f4:e6:f2:19:a3:d2:ee:
0a:fe:6e:6c:22:a9:de:8e:9a:67:4f:9e:8d:c1:1b:
bd:f5:8f:40:79:9f:f3:9a:5b:5d:81:89:97:00:a1:
d6:09:e5:ac:97:88:05:4c:60:4a:f6:96:2c:44:65:
75:2b:03:b8:24:f8:14:df:f3:c1:59:84:bd:cd:c7:
08:20:22:64:f0:12:ab:64:07:6c:e6:18:b0:97:3d:
f5:2a:e7:50:ac:ae:0c:59:d8:70:42:18:ec:06:4b:
10:e0:96:a1:49:6d:e0:35:38:92:f1:0d:79:45:f8:
ed:54:bb:11:8a:a1:5e:42:80:18:09:62:31:01:6e:
53:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150165
sbgp-ipAddrBlock: critical
IPv4:
103.143.236.0/23
IPv6:
2001:df1:24c0::/48
Signature Algorithm: sha256WithRSAEncryption
a7:71:e4:90:74:c8:c1:aa:04:24:f3:5b:96:7c:65:70:78:d7:
4d:67:34:5d:04:3d:55:4f:7b:d0:93:3f:d0:6b:36:e2:d8:7c:
83:c0:b3:12:ac:a7:5e:32:8a:fc:e9:8c:42:90:fb:9e:19:66:
e1:3f:de:4e:96:c8:16:ec:c5:58:eb:63:ce:ee:11:25:31:2d:
9d:09:97:77:16:c6:eb:4b:a5:3f:7e:0c:eb:9e:86:6e:b1:67:
f3:b1:56:a5:99:58:1b:fa:fc:2a:79:a8:91:bf:f1:d1:5e:01:
dc:f1:11:d1:e0:2c:d8:dd:94:67:2e:80:17:ce:82:5c:17:e1:
e7:ef:3d:22:40:d8:95:bf:0d:4f:e7:4f:1b:bf:fc:da:a8:e2:
fe:61:14:21:ba:22:38:2a:68:f6:cc:f8:87:aa:12:4a:0c:a8:
98:65:26:cc:4f:4f:b5:2e:e9:50:9f:32:5f:a6:ef:4f:c2:e1:
a7:d7:f5:5a:6f:9f:20:0f:cb:b0:f6:e4:50:3f:2c:69:2c:cb:
81:c1:e7:3c:06:51:9a:43:38:8a:a7:21:0d:7e:c0:85:02:f5:
53:c1:db:66:bd:9a:82:71:18:19:09:19:5c:21:cd:a7:dd:13:
26:e6:ac:7c:fa:7b:97:5e:bd:c2:9c:60:1a:5d:13:3a:9a:37:
24:80:cd:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:10:31 2025 by rpki-client