Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
File: AuOHDsPGHid3cW1wGLNMszV6AsQ.cer (raw, json)
Hash identifier: tOaJcY+P2MXAAtqUYFxaEAXV2bztml6KqiHdCHeEY2M=
Subject key identifier: 02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024F0B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 18 Jun 2025 22:20:46 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 137833
IP: 103.115.100.0/22
IP: 2402:e4c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 18:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151307 (0x24f0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 18 22:20:46 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91F5B0D, serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:aa:69:93:8d:24:a7:b9:8d:cb:37:e3:4f:
c9:17:d7:93:67:b8:1f:df:f8:b1:95:ca:1a:24:8b:
38:c8:a7:56:9c:cd:9c:8a:73:98:2e:24:d2:e1:49:
0f:49:1a:97:9c:0b:e2:1a:41:05:1f:63:09:d9:36:
b6:cb:28:6f:3d:86:ce:4d:e5:bd:5d:40:a9:1e:66:
cc:df:2f:62:25:b9:bd:66:32:47:4e:63:1f:89:cd:
8f:20:65:8b:d7:5c:19:fb:15:ee:2b:f2:12:9d:1e:
bd:9a:87:c7:30:cb:50:2e:64:58:b3:ac:1f:eb:18:
6a:4b:7a:83:bd:ce:19:14:d9:d5:c5:28:ac:81:71:
14:6f:45:d0:af:0a:16:ea:24:73:0c:00:ef:cf:c9:
dd:b2:d4:82:1b:c3:a1:34:cf:e2:6a:7f:da:6e:7d:
b5:20:1f:fe:0a:43:ed:50:49:b0:a6:68:6e:47:af:
4f:ea:e4:c2:a8:c5:0d:fd:3b:07:e3:54:06:1f:03:
81:0b:ba:47:35:f5:f0:e7:1e:2d:73:cd:f2:c2:fe:
c5:1f:c8:5b:9f:33:87:0a:39:5f:f1:30:93:b3:39:
0f:10:d3:d2:6d:9b:5d:5c:2c:90:68:1f:09:10:77:
d3:48:6d:81:f5:34:42:51:05:30:ec:a5:d7:21:1f:
90:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137833
sbgp-ipAddrBlock: critical
IPv4:
103.115.100.0/22
IPv6:
2402:e4c0::/32
Signature Algorithm: sha256WithRSAEncryption
6e:2e:1b:47:2e:fa:23:2b:b5:59:0c:44:cb:52:5d:bc:37:86:
c0:23:24:81:13:e2:0f:5d:58:09:e1:72:b1:09:6c:35:27:7c:
a3:ea:c8:22:44:37:a5:3f:17:9a:4b:e0:b4:ed:b6:77:b4:eb:
d1:06:0a:b5:9b:5c:2c:f8:1e:99:21:df:85:fa:d7:b8:60:61:
e9:0c:c6:2a:a9:92:44:9a:5c:e4:6b:fa:df:e0:cb:cc:8b:59:
50:e2:14:51:cc:68:de:87:0a:11:e7:8d:55:59:ea:41:12:0c:
23:0c:c5:84:30:e0:20:9a:7a:ac:a9:ea:88:75:0e:e3:2f:99:
ac:b3:ed:79:68:6f:eb:df:8f:50:c8:38:3a:6d:c6:56:f4:05:
00:8a:e8:df:12:06:35:1c:27:cf:68:ff:c2:c4:f8:d9:ae:2b:
6b:14:83:9f:65:dc:e4:b8:d0:d3:bb:9d:4d:5e:99:63:bb:af:
01:95:fc:8a:74:9f:78:db:2e:bc:4e:27:34:be:f8:0e:99:62:
54:29:2f:e6:99:73:5b:63:0a:4b:50:37:7c:b2:7b:23:27:11:
86:da:17:79:1d:41:a7:77:36:6e:0a:50:e4:bf:d6:c2:cc:fc:
10:6e:bb:9f:69:0d:5e:22:f8:c0:b6:d5:15:2d:4e:1b:d2:d6:
16:a5:f4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:52:46 2025 by rpki-client