Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer
File: 9FYY6ic_QLS8aF4piH4gUIPEkKY.cer (raw, json)
Hash identifier: zLVsxhgi6EzmofJVkPVRapFq2AilYJ/AjJYTvshkTD0=
Subject key identifier: F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024F80
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 21 Jun 2025 16:44:27 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 151324
IP: 103.196.176.0/23
IP: 2001:df2:6c40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Jul 2025 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151424 (0x24f80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 21 16:44:27 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91C3E37, serialNumber=F45618EA273F40B4BC685E29887E205083C490A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e3:24:5b:61:c1:25:b3:d2:36:88:85:e2:26:
ef:67:c7:63:94:73:88:06:c1:ee:83:d2:ee:d9:a6:
2c:e2:1f:67:34:68:5b:d9:e8:3f:63:ef:cd:9e:c0:
7e:3c:69:48:a9:1a:c0:10:72:05:76:f1:a2:07:e4:
2d:bc:b9:52:66:3b:dd:ea:d8:de:23:f7:d2:d2:e9:
1a:83:60:04:4d:53:72:6c:f8:92:74:cf:bd:e1:cc:
85:1f:ed:14:11:3f:77:a6:b0:16:bf:17:b0:38:0e:
df:e2:3d:f9:d6:0c:dd:fc:51:6e:c0:55:9e:9f:f3:
cc:ad:0d:14:99:40:07:94:d1:1f:aa:a2:56:79:74:
ae:68:c2:6c:ca:2b:50:d2:61:19:b3:33:2e:bc:39:
31:4f:53:2d:ed:52:e0:4c:c9:bb:a0:04:7d:21:31:
04:77:09:9e:ca:48:97:20:44:71:2f:4b:16:85:41:
c4:c6:f5:e4:57:b9:a6:2f:eb:3b:1a:1d:f4:38:47:
85:80:5c:52:22:46:50:bc:b2:50:60:8f:af:e0:f4:
fc:a0:50:b7:a0:45:52:ff:dc:da:24:d4:76:f2:3f:
7a:0a:81:4a:41:7f:7e:10:db:78:2f:c6:02:57:d6:
71:a0:71:21:51:36:32:ef:8c:7f:a0:d3:a0:78:0f:
35:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151324
sbgp-ipAddrBlock: critical
IPv4:
103.196.176.0/23
IPv6:
2001:df2:6c40::/48
Signature Algorithm: sha256WithRSAEncryption
62:bb:76:41:d9:cd:f6:1d:06:7d:36:66:e4:05:51:8d:a2:e0:
33:78:f4:15:c2:d1:59:5d:86:c7:fd:6a:be:0f:14:0f:69:cd:
ed:04:53:81:8f:ae:00:40:6f:85:8e:5f:24:71:d0:ef:ca:4a:
b7:be:57:94:35:7f:19:ef:bd:67:ff:39:41:cb:28:05:e0:77:
cc:d7:41:55:7f:d3:8c:50:6b:e6:f3:61:d1:fd:84:ff:e0:a9:
62:3a:b0:e4:30:8e:06:ed:5e:4e:5d:cd:84:28:37:0a:ea:0a:
6d:c2:75:cc:3f:0e:58:93:93:87:b5:c6:80:80:78:fb:10:dc:
43:5e:9f:70:61:b0:f3:06:5c:6a:84:4d:98:30:d1:4b:77:a7:
ed:3e:fe:64:60:05:47:19:3f:06:48:bc:3c:96:a2:e9:fd:56:
16:b8:78:ee:fb:e2:b4:62:85:b1:ed:4a:81:78:58:4a:d7:a2:
f7:63:1f:8f:55:88:5a:61:a6:3b:00:40:0f:ba:8f:d7:ee:73:
32:5d:e1:9a:32:60:19:1d:ac:1a:bf:91:f4:8f:c7:9c:2f:a6:
27:04:dc:93:bf:76:c1:bf:7e:ad:fe:9b:bd:cc:ac:ae:1c:b9:
4f:b2:af:9c:ce:7a:94:9a:5c:9d:06:c5:7a:89:0e:9d:a4:11:
0f:ff:fc:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:36:04 2025 by rpki-client