Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer
File: NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer (raw, json)
Hash identifier: tIblUzQIpvvNP0IhZM+WiDqb2vy7dL9ZIKPk114lDFM=
Subject key identifier: 34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025064
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 25 Jun 2025 21:54:08 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 139197
IP: 103.139.164.0/23
IP: 2001:df0:8580::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Jul 2025 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151652 (0x25064)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 25 21:54:08 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91A56E7, serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:27:69:27:e8:2b:60:d7:10:d0:40:de:6e:
aa:5b:ca:9d:86:c5:14:ff:79:1a:b2:08:0b:4f:97:
32:3b:3f:1e:6c:5d:f5:be:b6:d8:66:57:b0:b4:be:
1b:36:80:e6:9c:4d:37:b4:e6:11:31:9f:06:85:f8:
ea:a8:b2:08:de:37:76:6b:f4:22:69:fe:79:00:17:
00:a4:28:ad:bc:19:43:e5:fd:03:90:f6:6a:01:56:
1a:df:ac:67:60:65:e4:ca:37:35:6d:23:51:e5:92:
e1:c7:7a:95:3e:30:8a:1b:4a:83:a8:c8:cf:1a:8c:
29:9d:15:b3:03:57:af:c7:4e:15:7e:aa:0a:f1:8e:
df:e0:e5:c7:e2:ac:98:8a:fd:b5:f5:29:cd:53:52:
36:9e:81:75:16:ba:b4:17:a0:92:02:45:07:d7:83:
a5:dd:79:d1:b3:32:53:ea:ef:66:19:2a:be:38:d7:
a8:04:47:dd:ca:f6:98:28:28:61:95:54:34:62:2a:
b5:a5:f0:e5:fe:bf:66:52:d0:59:71:6c:aa:de:2a:
82:cc:a1:8b:97:85:71:19:e8:26:05:21:4c:63:99:
84:0d:64:ee:34:06:e2:8a:f1:60:15:f4:a3:24:55:
ec:11:8a:74:ab:f6:20:0e:4e:b4:f3:5f:84:59:a8:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139197
sbgp-ipAddrBlock: critical
IPv4:
103.139.164.0/23
IPv6:
2001:df0:8580::/48
Signature Algorithm: sha256WithRSAEncryption
c7:fe:e2:ce:c1:c3:c9:c2:f7:3d:30:b5:6e:3d:3a:0a:6e:aa:
c7:56:11:56:e4:02:00:73:07:cd:03:68:ef:d0:3d:d8:d7:84:
22:b4:a6:d8:e1:9c:09:60:df:4d:07:21:d3:5c:11:6b:dd:74:
39:11:f1:1b:d0:35:cb:23:ce:cf:1f:fb:16:8e:ae:66:b0:24:
7c:c4:f9:35:d4:bd:9e:05:0a:37:7b:5d:98:74:74:94:97:7c:
a9:ba:f6:66:e9:89:5d:79:36:14:ea:26:65:c1:5b:eb:65:0b:
aa:1b:7e:90:51:4f:45:bb:32:ae:9d:86:43:69:8e:a0:e6:2a:
8e:4b:ac:84:ce:8f:00:bd:fb:5d:b1:5e:95:50:e1:5e:60:53:
0c:f9:2f:b8:50:31:c4:2d:fe:b5:8b:a3:7b:71:ec:04:a8:78:
b7:da:c5:52:43:27:c1:82:fd:e5:ce:2d:44:7e:3e:d7:a0:e7:
03:be:6e:57:36:d8:07:71:81:47:f8:16:3d:94:45:8b:85:46:
66:41:01:e7:e5:ba:60:d6:9f:92:a7:90:c5:ed:f9:67:14:50:
ba:4b:9e:1c:44:50:7f:8f:8f:5a:a6:31:03:27:ed:55:83:54:
06:72:68:03:87:45:9a:0f:2d:a9:ee:22:4b:a8:87:51:16:19:
d3:4d:6b:68
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAlBkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDYyNTIxNTQwOFoXDTI2MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQTU2RTcxMTAvBgNVBAUTKDM0NzYzNkYwRTk4QUY4MjQ4MjZCMUJD
Rjk2RjNDNzc2RDgxMkY1NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9EidpJ+grYNcQ0EDebqpbyp2GxRT/eRqyCAtPlzI7Px5sXfW+tthmV7C0vhs2
gOacTTe05hExnwaF+OqosgjeN3Zr9CJp/nkAFwCkKK28GUPl/QOQ9moBVhrfrGdg
ZeTKNzVtI1HlkuHHepU+MIobSoOoyM8ajCmdFbMDV6/HThV+qgrxjt/g5cfirJiK
/bX1Kc1TUjaegXUWurQXoJICRQfXg6XdedGzMlPq72YZKr4416gER93K9pgoKGGV
VDRiKrWl8OX+v2ZS0FlxbKreKoLMoYuXhXEZ6CYFIUxjmYQNZO40BuKK8WAV9KMk
VewRinSr9iAOTrTzX4RZqJkDAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUNHY28OmK
+CSCaxvPlvPHdtgS9VswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUE1NkU3Lzc4NjBGOEJBMTFDMTExRUE4NThFRTY4MkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBNTZFNy83ODYwRjhCQTExQzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9t
Sy1DU0NheHZQbHZQSGR0Z1M5VnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAh+9MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ4ukMA8EAgAC
MAkDBwAgAQ3whYAwDQYJKoZIhvcNAQELBQADggEBAMf+4s7Bw8nC9z0wtW49Ogpu
qsdWEVbkAgBzB80DaO/QPdjXhCK0ptjhnAlg300HIdNcEWvddDkR8RvQNcsjzs8f
+xaOrmawJHzE+TXUvZ4FCjd7XZh0dJSXfKm69mbpiV15NhTqJmXBW+tlC6obfpBR
T0W7Mq6dhkNpjqDmKo5LrITOjwC9+12xXpVQ4V5gUwz5L7hQMcQt/rWLo3tx7ASo
eLfaxVJDJ8GC/eXOLUR+Pteg5wO+blc22AdxgUf4Fj2URYuFRmZBAeflumDWn5Kn
kMXt+WcUULpLnhxEUH+Pj1qmMQMn7VWDVAZyaAOHRZoPLanuIkuoh1EWGdNNa2g=
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:15:50 2025 by rpki-client