Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
File: x-37dX9ZS98jrdcSH12-PSWuAPw.cer (raw, json)
Hash identifier: ciwDfRDQ1jCWvmeMo12sIC7bFc1KHfjmDWDS9Ogel/k=
Subject key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025A38
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 01 Aug 2025 10:46:09 +0000
Certificate not after: Sat 31 Oct 2026 00:00:00 +0000
Subordinate resources: AS: 137523
IP: 103.97.176.0/22
IP: 103.242.12.0/22
IP: 2401:89c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154168 (0x25a38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 1 10:46:09 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b1:16:9e:85:87:8d:64:47:69:ca:24:f6:78:
34:79:51:9a:16:30:68:08:65:c0:7a:60:2b:68:61:
50:a2:a6:0d:81:a6:94:f7:06:16:a6:89:71:27:d4:
6c:26:eb:28:92:d4:60:db:96:81:33:12:32:64:85:
fa:05:25:39:4d:0f:3e:76:5f:0a:fa:3e:8d:d4:8c:
fa:af:2b:f8:66:40:6b:d4:c9:e8:ef:82:b4:6b:96:
31:c9:8b:d0:7b:b8:06:8a:0f:b6:ba:74:69:f2:f4:
91:fc:40:b9:fa:57:f8:53:6c:42:27:c5:2d:db:92:
db:16:da:e3:4e:aa:60:c7:08:00:db:e2:e4:8e:87:
6b:69:bf:e0:78:77:00:70:bd:ee:f1:b5:eb:c2:3e:
9e:37:51:bd:46:60:9e:37:bd:b1:10:c7:2f:d9:7d:
ac:2d:79:c5:61:8b:85:00:8a:8d:55:12:a1:bd:13:
cf:7e:6a:bf:16:f3:6f:ab:67:d3:ee:21:c8:e5:83:
f6:0b:1e:d9:6f:59:3d:24:85:03:0e:a0:0c:12:c5:
cc:c0:e6:fb:ed:33:04:ba:81:f5:b1:f3:15:d1:54:
ec:7c:b3:79:65:15:82:c2:2b:37:06:80:13:4d:4f:
4f:6b:3f:a0:a3:01:5e:ab:40:6d:4f:e7:1c:a7:ae:
24:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137523
sbgp-ipAddrBlock: critical
IPv4:
103.97.176.0/22
103.242.12.0/22
IPv6:
2401:89c0::/32
Signature Algorithm: sha256WithRSAEncryption
7f:39:90:df:24:79:be:f7:af:b3:37:5a:b7:f3:1a:84:10:5b:
49:36:5d:70:0f:7c:5f:78:fe:c5:ea:5b:61:f8:3a:0b:ab:e5:
17:ad:e6:5e:87:7a:6f:81:a0:94:12:71:6d:73:12:a5:ae:c6:
8d:4d:67:fc:2b:39:0a:ae:55:d9:f8:67:22:59:a7:9d:8b:e5:
79:19:05:1e:64:c5:06:3c:cb:e7:86:48:34:ce:f0:68:5f:5a:
13:0b:8a:fd:af:e3:c6:43:30:2f:e3:f3:81:57:b5:33:c9:dd:
75:83:c1:26:ad:4a:27:b7:18:6e:c0:21:7b:19:92:33:ed:af:
53:68:9c:22:4f:c2:cb:35:1d:16:d6:fe:e6:4d:d3:43:ea:ed:
0f:1a:03:22:24:bb:29:9f:56:75:18:19:4a:7d:c1:43:9d:aa:
30:d6:bc:ee:b1:17:33:a9:03:31:48:45:eb:18:7d:35:32:43:
61:14:02:35:af:86:08:b7:a9:f6:cb:7e:a1:1c:b8:94:04:5d:
c0:e9:c8:64:90:f1:79:fd:82:69:5b:15:c1:d1:04:b9:5c:2a:
a4:b3:1e:6d:48:b3:e4:9c:e2:e1:6f:43:8c:9c:dd:16:c6:a5:
a0:15:e6:13:01:d6:59:9d:c2:34:49:7d:c6:be:60:ce:15:5f:
c1:ec:df:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:26:43 2025 by rpki-client