Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
File: Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer (raw, json)
Hash identifier: s05tGoa0ZfpVrzs3zn7fd4k5Hj8dh96vbjLf18ojnQk=
Subject key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0251F2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Jul 2025 05:27:32 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 142297
IP: 103.167.186.0/23
IP: 2001:df6:bb80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 23:56:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152050 (0x251f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 1 05:27:32 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A911112F, serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:c4:60:18:61:cd:c4:6f:8a:59:61:12:92:
c5:a0:bc:73:a3:33:5c:0b:0a:5c:13:f3:6b:28:43:
3e:bc:56:02:79:97:22:b5:ed:a7:8d:1e:80:18:59:
fc:00:56:34:8f:e0:3a:d0:65:b2:19:04:67:f6:10:
f8:51:c7:74:8a:91:e0:a3:e6:06:ba:03:e3:ad:36:
cc:89:8d:dd:6b:fe:40:c7:a1:87:c3:23:43:7a:e3:
07:b6:67:e8:93:ad:16:1c:07:69:af:c7:6f:b1:ec:
11:21:69:bb:02:13:94:09:5a:a4:21:26:91:4f:8a:
31:8f:e7:7a:c7:b3:26:8b:d7:a7:4e:97:db:4b:2f:
4f:8c:cf:98:28:0a:3a:c5:5d:e1:f9:5f:45:b6:ba:
30:82:08:86:e7:21:a0:4a:d0:83:03:7d:e1:3b:c4:
c1:d1:87:9e:33:e3:59:24:4d:1f:5a:5f:0d:d0:13:
7b:ef:0f:e9:32:c8:ac:f5:12:2b:e7:0e:d5:03:b2:
a8:87:2d:dc:cc:81:fd:ce:5c:37:35:9e:0e:35:c8:
fe:16:11:b0:f3:22:22:78:70:98:a7:ab:1b:46:e8:
9c:a0:32:25:44:72:6b:2b:26:4a:7e:ae:c0:8c:c7:
60:6a:fd:45:ae:95:d4:b7:8d:ed:66:47:10:b6:eb:
93:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142297
sbgp-ipAddrBlock: critical
IPv4:
103.167.186.0/23
IPv6:
2001:df6:bb80::/48
Signature Algorithm: sha256WithRSAEncryption
9f:28:d9:9e:f2:4b:3f:4f:8c:84:8a:17:a0:31:03:34:d8:f2:
66:41:e8:38:dc:0e:ce:33:38:83:af:9c:1d:55:ab:8d:89:cb:
34:55:74:d7:38:82:db:f7:04:60:32:83:c4:0d:ca:d2:c9:97:
93:4a:92:65:1a:f0:2c:92:74:49:0d:2a:8f:6f:1d:26:1f:73:
05:39:d5:2b:c5:71:97:f3:86:78:37:13:26:86:55:8e:a6:38:
c5:8c:86:11:f5:fa:13:5f:34:bb:77:e4:64:2a:83:74:16:76:
41:a0:2e:a5:ee:bb:e0:e3:c6:d0:a6:31:b0:ec:87:f0:47:45:
9c:26:a3:5b:94:96:e4:4b:47:01:38:0c:c0:89:17:32:3d:d2:
da:20:d4:b0:af:84:4b:53:0a:fe:3b:bd:5f:0c:9b:56:e1:1a:
43:ba:3d:61:d0:be:3c:2d:11:fe:83:05:9f:05:ed:2b:27:6a:
7e:85:b8:24:39:dc:ab:99:3a:04:6c:a7:10:4f:ca:ed:04:4d:
83:ed:a2:de:a9:89:50:20:1f:e9:cd:db:4f:a7:17:66:a1:4d:
6b:42:c6:2d:5d:1e:83:b9:5b:83:ea:3d:05:72:dd:75:e0:32:
88:ba:46:db:cf:d5:40:c2:e8:73:da:de:bb:b6:b8:c7:fd:e3:
83:5a:32:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 3 01:25:40 2025 by rpki-client