Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VYp3mJDm7AepHisFcom6ZWpeGQ.cer
File: 2VYp3mJDm7AepHisFcom6ZWpeGQ.cer (raw, json)
Hash identifier: 2EFQLSy+freXOvWm9NFDWhYCDnlMfLQ5yHpl+qJf+70=
Subject key identifier: D9:56:29:DE:62:43:9B:B0:1E:A4:78:AC:15:CA:26:E9:95:A9:78:64
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025041
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 25 Jun 2025 14:31:59 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 140661
AS: 152903
IP: 103.151.115.0/24
IP: 2001:df3:bf80::/44
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Jul 2025 18:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151617 (0x25041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 25 14:31:59 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A913854D, serialNumber=D95629DE62439BB01EA478AC15CA26E995A97864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:07:09:48:8c:5d:97:6c:65:48:a9:5a:b8:
ee:ba:74:e6:d6:d0:9b:f5:ce:5b:16:84:96:1e:f3:
fb:07:c8:e9:8f:4e:b7:6d:0c:f3:bc:19:32:19:9f:
d8:a1:76:a4:61:2a:29:35:66:fc:0b:ec:85:32:b2:
a7:09:91:08:0c:2a:fc:42:19:b4:60:25:38:92:1a:
b6:0f:3e:e9:94:06:96:78:fd:29:e5:8b:f5:ef:12:
a0:07:66:05:31:1f:33:54:6d:b0:d2:69:64:14:34:
0e:94:15:6b:95:da:ad:a1:97:d1:a9:e1:91:bc:01:
a5:05:68:55:ce:a5:58:df:de:83:42:e3:88:68:e4:
fe:26:07:08:89:52:c5:a0:ec:f0:71:0e:5d:17:ed:
b6:f6:af:5e:fd:5e:20:a5:2a:eb:f3:e1:33:c2:a1:
73:82:a5:07:e7:e3:32:3a:44:a3:05:3f:45:8e:0a:
d0:7f:4a:1d:8c:c9:9e:8f:0b:0d:80:2f:f4:59:cc:
47:6f:98:7c:40:b1:e6:d5:dd:69:cb:5f:4f:6f:01:
91:be:59:ba:33:52:19:6d:d2:9f:5d:f7:3c:dd:1f:
e0:0c:03:37:ce:40:64:ce:17:8d:9c:a1:ef:1f:67:
c6:25:09:90:9a:03:53:8c:07:dc:6f:20:5c:86:56:
20:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:56:29:DE:62:43:9B:B0:1E:A4:78:AC:15:CA:26:E9:95:A9:78:64
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140661
152903
sbgp-ipAddrBlock: critical
IPv4:
103.151.115.0/24
IPv6:
2001:df3:bf80::/44
Signature Algorithm: sha256WithRSAEncryption
ce:38:8d:d5:aa:b5:b0:12:af:05:56:aa:1f:9d:26:c5:2c:e3:
1a:92:52:e7:e4:51:47:7d:b8:c2:71:de:a6:03:8e:7f:76:15:
58:fa:12:5e:61:73:43:51:79:54:59:9a:76:6d:48:ba:ae:5b:
5d:61:aa:27:c6:4d:e1:66:1d:77:a7:d7:10:ec:f4:95:6a:7e:
4e:a3:d5:c9:b1:e6:f9:a0:2d:0f:f1:20:19:c6:a6:c0:30:fb:
82:bf:ec:b3:61:ee:4d:81:56:ce:8e:51:af:cd:53:a8:ea:35:
91:8b:11:36:c9:84:bb:d6:9f:80:e2:d7:e9:21:4a:97:4a:70:
8b:12:cc:de:53:22:a4:ca:36:65:79:61:d3:f4:31:9a:a0:27:
7e:12:1b:18:82:67:58:31:15:bf:b1:95:89:b9:d8:d1:a7:bf:
ba:ee:28:0d:49:e5:2c:90:e1:2a:c8:fc:bc:98:97:06:a5:3e:
0e:22:ab:d7:1f:95:0b:95:42:2e:9c:db:2f:17:8f:84:0c:dd:
68:fc:a0:05:ae:75:e3:d8:9a:32:dd:86:6f:d6:07:62:19:1b:
5c:3b:ba:2e:1c:ae:dd:a6:8f:0b:af:cd:2b:12:1c:3f:bf:20:
da:42:4b:be:1e:ff:95:70:27:e3:17:03:0d:80:d1:8c:b7:a4:
05:1a:46:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:44:52 2025 by rpki-client