Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer
File: vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer (raw, json)
Hash identifier: YFG3lxMQiRMheMKnzyeigmxse7CoEseT+KsuGueDdr4=
Subject key identifier: BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0252EF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Jul 2025 20:35:15 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 137841
IP: 103.115.112.0/22
IP: 2402:e640::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 Aug 2025 04:46:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152303 (0x252ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 2 20:35:15 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91943F0, serialNumber=BD92626B400BB14DE41A50539D960FC5DD61DC37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ae:85:b2:8d:de:bd:77:b0:c0:eb:16:8f:85:
49:e8:ab:9d:0f:ea:49:28:9d:95:e0:ed:3f:ff:10:
2f:76:fd:f2:68:84:6d:e6:c6:6b:ab:37:8a:38:3f:
0b:35:41:23:5d:35:32:b1:8e:e3:ba:44:3f:cd:46:
0a:f9:1a:44:9a:21:66:ec:e2:bc:c0:74:70:36:da:
01:22:4f:a3:27:42:fd:bb:32:b8:ff:ac:46:e5:ee:
83:ca:54:73:4b:e2:62:28:a0:27:c9:c1:7c:1c:82:
11:35:e7:83:a7:42:c2:29:25:7a:17:4b:e8:95:c5:
57:0d:ae:3b:f5:ac:4e:e5:31:e1:f8:19:d5:ac:ec:
dd:74:03:94:a8:fb:25:0e:4c:a2:d8:43:bc:e2:67:
a1:0c:37:ed:da:c5:9a:19:0c:da:7d:f9:19:cb:9d:
e9:ab:2f:8a:aa:98:e6:00:67:f1:96:0b:d0:0e:24:
5b:a3:6c:04:05:25:20:27:c6:6f:26:06:85:6d:cd:
38:b5:37:b0:e2:3b:40:66:33:69:4e:04:7c:2b:e7:
81:3e:73:16:43:37:61:4e:7f:cf:0e:e2:6f:a3:7e:
4a:0d:99:02:e3:78:50:bf:13:a3:d6:9f:e1:34:1f:
79:f2:3c:4b:e5:f6:f9:b2:58:75:e0:f5:a0:c6:07:
e6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137841
sbgp-ipAddrBlock: critical
IPv4:
103.115.112.0/22
IPv6:
2402:e640::/32
Signature Algorithm: sha256WithRSAEncryption
5a:40:6e:e8:4b:9f:c0:78:e3:eb:bf:94:cf:45:e5:fd:6a:15:
27:2d:8d:d0:dd:5e:e1:c7:b1:ea:33:8e:06:5f:5b:52:93:5e:
eb:d8:a5:0e:a0:8b:86:60:34:af:53:c1:1d:30:30:a0:c4:a7:
69:ca:63:1c:73:db:8c:ae:e4:0f:59:84:b7:e4:5b:0f:82:d1:
a5:d3:6b:f1:ad:6f:f8:45:82:f0:24:aa:11:4a:72:cf:f4:10:
7b:b2:a0:87:d6:31:06:ad:3a:c1:15:7a:de:a1:dd:53:54:f9:
9d:6a:55:b0:61:52:4b:dc:39:66:ef:cb:8e:52:cf:2b:90:ee:
26:2e:0c:ee:49:16:04:7a:9c:57:3b:61:b2:cd:e8:b3:14:82:
4b:23:cf:e9:16:74:bf:94:89:47:ea:d4:7c:e3:37:6c:e1:10:
da:c7:49:56:45:4f:0e:7f:81:b9:25:f1:d4:f1:be:14:b8:5c:
89:d2:67:7c:73:3c:3d:cb:fb:e4:5a:29:cc:bc:50:6d:03:9e:
b3:32:62:84:2c:5d:ce:c7:08:8e:c2:5c:8b:5a:a1:6c:d5:bc:
74:c2:5f:fe:44:bc:af:e7:0e:54:49:e3:2d:ca:1a:1c:86:a1:
9e:4f:f9:e8:f2:ed:e4:cc:b4:de:5b:18:5c:7f:f5:9a:fc:f9:
2d:ea:82:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:07:30 2025 by rpki-client