Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer
File: ySRgFCV-7__-gM0-q_7WeomNb1c.cer (raw, json)
Hash identifier: gp7B2fvRDeK8SQqeyE7tpAqSsDAisMWKHb/yA3BTf0U=
Subject key identifier: C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024CEB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 06 Jun 2025 21:34:51 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 136548
IP: 103.92.136.0/22
IP: 2407:d5c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150763 (0x24ceb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 6 21:34:51 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91F9766, serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:7a:fb:13:df:f1:24:aa:a5:1d:c8:d1:0b:
de:3e:7a:12:e8:04:89:8b:57:83:af:c5:5e:b2:30:
a0:6e:c5:74:65:ad:e6:34:4d:4f:03:ba:d7:87:d1:
3f:63:e9:a2:03:f0:9b:92:52:ac:2f:3e:59:b4:0f:
e9:eb:35:1d:f4:98:b2:71:3c:41:8d:38:93:f3:6d:
21:28:47:58:c1:a1:bc:6b:ca:be:b8:35:b1:d4:8a:
f1:4b:14:12:8b:de:4d:c7:20:fe:e8:12:8b:74:e1:
5e:ed:7a:1e:44:73:cc:15:8e:78:bf:d6:48:44:78:
6d:88:77:57:f2:df:3f:42:b7:7c:c6:76:be:53:d8:
64:62:30:1b:db:1d:83:5d:8c:b1:2c:80:f3:4a:19:
9f:68:8d:f6:48:5f:6d:7f:34:95:3f:61:1d:f0:b2:
da:5b:b6:49:cf:04:60:eb:32:8b:9f:80:ec:6c:94:
d9:92:c2:cb:12:13:4d:2f:de:81:7c:28:31:bb:b7:
0c:fe:26:1c:05:26:1f:d7:a4:c6:c9:9a:1b:00:c2:
d7:36:73:c3:6a:74:0c:6f:3d:f5:7b:43:37:39:32:
31:7c:e7:49:00:dc:c7:ae:28:7b:92:f4:ce:db:44:
4a:0d:78:90:df:0e:79:d7:f8:3d:68:aa:83:11:c4:
df:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136548
sbgp-ipAddrBlock: critical
IPv4:
103.92.136.0/22
IPv6:
2407:d5c0::/32
Signature Algorithm: sha256WithRSAEncryption
55:bd:a9:ec:44:ea:06:c1:83:b8:e2:0f:cc:8f:82:64:6a:4f:
9b:c6:cf:4d:93:61:5b:67:c1:b4:9f:d2:28:4b:06:3b:21:94:
96:fa:78:cd:e9:31:da:05:40:80:14:91:0c:9b:76:0c:5f:0c:
d9:b2:5f:be:ad:65:38:66:00:ab:c1:8e:c2:35:70:96:7c:66:
0e:56:14:d2:ea:2e:b2:e8:8f:29:fe:bb:76:a3:96:01:ab:85:
9a:85:90:9e:05:ed:c3:84:3c:11:7c:cf:3d:a4:fd:d3:1e:5c:
03:56:44:e1:87:ee:83:fa:08:24:04:4e:70:4d:b6:0b:9a:78:
89:57:d3:04:80:5c:6f:32:85:a8:e5:16:68:27:77:6e:94:ba:
94:d2:f7:17:e7:91:7b:2c:b4:a0:82:b5:8a:d4:7d:92:a8:42:
9c:e9:d7:e5:42:48:55:88:88:bc:11:2c:46:0b:d4:8f:11:4f:
13:3c:59:9a:0e:87:2e:23:71:df:2f:5d:ad:45:fb:1d:8d:49:
2e:d5:1e:53:0f:e1:2a:ee:a0:7b:a0:af:f1:68:db:b8:0c:18:
c0:6d:16:c5:b0:1a:74:5b:f9:72:a5:f7:d4:9a:9a:e7:03:9f:
31:a0:b0:06:a0:c6:b9:1f:00:0c:99:59:a8:d7:1f:67:03:bf:
6d:3f:49:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:22:19 2025 by rpki-client