Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
File: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer (raw, json)
Hash identifier: OA32khYD4+W7GTaNb2FgwGr5E+lDbNJ97bu8VXWMPDU=
Subject key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025099
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 26 Jun 2025 18:01:48 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 131270
IP: 103.68.160.0/22
IP: 103.232.76.0/22
IP: 2403:66c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Jul 2025 22:46:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151705 (0x25099)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 26 18:01:48 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91822BF, serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:c7:b5:b0:6b:0c:09:82:56:18:fa:5f:69:
a3:7a:91:78:83:9a:de:69:2a:a7:74:7a:ca:af:00:
23:14:c1:d7:0b:40:71:0f:f6:d7:a7:63:e9:52:1b:
2b:30:9b:b4:3c:5c:42:d3:6b:b7:69:9c:12:02:b8:
97:40:68:fb:77:8c:29:46:80:7c:28:a2:30:42:fe:
64:61:6b:9f:71:70:3b:2a:80:ee:35:b2:6a:47:f5:
e3:ec:5a:d7:e9:49:e0:e2:b3:40:1b:76:c4:f2:a3:
f3:d6:93:08:2f:d4:ba:a1:c9:c4:b6:bb:bb:79:f8:
fa:c6:b9:d2:35:3a:00:58:2d:9f:40:8e:07:4b:93:
a5:d8:51:17:63:28:b3:9f:1d:da:ad:74:08:d6:88:
19:b8:05:20:6a:66:ab:2f:1b:24:54:e7:62:3f:44:
60:06:68:b7:e0:d8:3f:50:cf:ad:07:19:9c:a7:e4:
ac:ea:c8:5f:2b:95:af:53:f5:71:8e:b5:2a:5e:1d:
7f:5a:e3:1b:97:e5:38:91:09:f0:b7:50:0a:d8:42:
91:31:6e:38:84:06:c9:17:60:6f:b0:7d:99:d6:cc:
fc:f7:3b:fd:02:2e:e6:94:c1:6d:a8:ee:78:b3:63:
1c:b8:0d:66:5e:64:ed:6a:65:65:5b:93:46:66:ac:
c7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131270
sbgp-ipAddrBlock: critical
IPv4:
103.68.160.0/22
103.232.76.0/22
IPv6:
2403:66c0::/32
Signature Algorithm: sha256WithRSAEncryption
ae:6e:d6:f2:95:4b:09:cb:37:b7:29:d9:1f:1b:19:a7:83:37:
68:6b:ac:66:18:75:57:cb:e6:64:23:89:7a:a5:75:ad:f1:fc:
b0:28:8b:17:ce:26:55:f6:ea:2f:90:30:f3:72:31:ba:f4:f6:
d4:d4:45:8e:13:44:2c:0d:12:2d:ae:ef:b3:53:98:ac:c0:ef:
8b:87:84:e4:40:34:8a:4a:77:3d:c2:b2:93:af:b5:58:97:1d:
aa:80:76:22:e1:d2:0c:63:32:4a:1a:1d:78:0a:c0:ca:fe:ae:
93:99:6a:7b:8b:3c:cd:bf:30:a8:71:bb:b0:4f:02:8f:48:ca:
c8:ef:e0:64:0c:38:13:e8:1b:52:11:a4:b4:8e:d1:8c:4f:6a:
57:54:7a:43:94:c2:1d:12:ac:b9:fe:59:4c:dc:93:6b:de:c9:
a0:f5:bb:7c:06:1f:12:91:ac:d5:bf:24:b0:8e:f2:36:cf:46:
f9:af:60:5a:b5:65:7a:9a:03:41:26:2d:83:4b:d4:aa:09:3b:
f8:4c:c1:50:4d:a2:32:d2:c3:20:6a:2d:cc:bf:92:af:ff:e3:
3b:37:87:11:6a:d9:ab:e6:ba:5b:ff:7a:b4:02:09:fa:6d:ba:
a0:b8:83:a8:5f:b1:fa:99:6d:ad:3e:f8:5a:04:5e:61:c3:e2:
27:38:40:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:34:02 2025 by rpki-client