Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
File: 8Ihby_xPi54CzI2RkpttUoNSrig.cer (raw, json)
Hash identifier: CAL9LCggYnb4QDkYuiISPEuXHd3qKCjTr4HAXPSFdV8=
Subject key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024F8E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 22 Jun 2025 15:42:03 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 58923
AS: 135095
IP: 36.255.68.0/22
IP: 103.23.40.0/22
IP: 103.120.192.0/22
IP: 103.209.40.0/22
IP: 103.248.12.0/22
IP: 118.67.208.0/20
IP: 163.53.148.0/22
IP: 2406:f100::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 22:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151438 (0x24f8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 22 15:42:03 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:a8:77:b8:3f:d3:e9:1c:69:06:d6:c3:73:
5e:4c:48:64:87:26:18:b6:ac:7a:aa:dd:25:0a:bc:
d9:a9:fd:c6:98:cd:47:ae:76:f6:f0:f2:9e:33:7c:
de:79:fb:bd:07:4b:b6:0b:f3:c6:33:69:40:30:4e:
6f:87:e8:55:ff:d0:14:de:68:c7:65:f4:29:4d:26:
c3:5c:3e:e0:00:7a:b3:7c:a1:a6:f1:58:92:44:fd:
db:f4:f7:4f:5f:19:f4:0a:58:d3:01:8e:cc:ff:d6:
32:d4:0d:cb:0b:96:5c:3f:95:1c:18:38:fc:f7:41:
cc:d1:34:fb:c8:c0:94:f8:18:ef:87:d2:8c:9e:16:
46:86:6f:f8:5e:76:2b:bd:c1:67:6c:ab:71:2d:f1:
77:fa:4c:f4:24:51:f8:e2:5d:b4:7b:c5:ed:e1:d5:
54:64:1a:e7:7f:10:3f:50:d7:04:a3:1b:b9:a0:e6:
98:ac:f7:a6:23:32:cf:6a:2a:e6:2f:a2:43:58:ba:
df:c5:96:03:d9:a0:92:d8:24:d7:6c:e1:09:45:e1:
25:ee:87:98:b7:50:c5:36:03:62:74:68:46:a1:36:
16:d3:4e:b5:51:e8:ab:48:13:f4:a7:a5:d2:dc:63:
dc:61:43:3e:98:52:61:b1:ef:d3:b1:97:e4:c5:de:
55:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58923
135095
sbgp-ipAddrBlock: critical
IPv4:
36.255.68.0/22
103.23.40.0/22
103.120.192.0/22
103.209.40.0/22
103.248.12.0/22
118.67.208.0/20
163.53.148.0/22
IPv6:
2406:f100::/32
Signature Algorithm: sha256WithRSAEncryption
8d:d9:13:be:9f:26:8d:f2:e5:6c:21:ef:e3:a8:d4:c1:49:d5:
1b:ec:5c:80:71:dc:6c:ed:60:78:b4:18:0d:f8:27:5e:56:c3:
8f:53:87:9f:0a:5f:c7:ba:b1:35:2e:26:25:68:7b:10:b9:2e:
ce:69:8f:0d:91:95:50:40:38:60:22:6e:7b:36:6f:86:94:67:
55:1a:1f:d4:ca:8c:be:80:32:a8:2f:57:15:14:11:6e:2b:9c:
4c:59:d6:0c:53:37:02:05:0b:67:4d:e1:aa:f9:90:a4:b6:a6:
be:bf:3a:65:d5:06:a9:cf:71:4b:40:1d:e2:1d:5d:e6:a2:a4:
9d:bf:38:46:41:15:d0:02:cd:28:98:d8:a5:24:e9:47:a5:3d:
09:fc:2d:8f:78:07:e6:04:e0:8a:1a:55:5f:82:b6:99:64:a8:
f1:4f:59:5a:4d:41:28:40:20:36:0e:ce:ba:39:ba:d7:1c:5b:
4d:22:b7:55:80:0e:77:22:9f:65:5b:45:60:60:01:68:58:5c:
9f:42:dd:45:37:52:72:68:92:84:a3:7b:42:a7:19:32:73:eb:
c1:3e:06:ba:c9:12:d5:d5:1a:46:99:64:2b:58:ba:65:b7:4b:
53:42:b5:14:21:b8:e6:79:6b:88:30:19:9e:c9:6c:4b:27:99:
e2:65:c6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:56:52 2025 by rpki-client