Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer
File: SU13HlEeEgBTuwmx8nS9j1nXOqg.cer (raw, json)
Hash identifier: nXYRwC/D/WVUQ5TG7wo9PCSV00R8QlcsY5Y/Qf4ybUM=
Subject key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024F40
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 19 Jun 2025 19:39:37 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 137842
IP: 103.115.156.0/22
IP: 2402:ea40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151360 (0x24f40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 19 19:39:37 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bc:0f:fc:49:17:95:fd:eb:d0:a7:37:51:10:
15:95:f5:4a:db:13:b6:f2:ec:57:66:f6:27:93:d0:
3c:cf:12:39:06:d4:ae:53:dc:ac:33:07:9c:a7:ae:
3f:e0:c5:9c:3c:52:57:2d:4e:08:28:eb:75:31:aa:
da:5b:3d:e6:d4:50:57:4d:09:e9:63:83:66:c2:90:
cd:9c:df:bb:03:ee:b9:7b:53:8b:2f:4b:5b:72:8c:
91:7f:dc:0b:c9:59:b5:e0:40:6b:ef:7a:e4:d8:2d:
49:1a:ee:df:ad:0f:f5:ee:13:d4:7e:76:16:0d:26:
30:e7:6c:87:9d:fd:03:4a:38:cb:9f:18:b7:5a:d9:
0e:64:00:f8:f2:c0:b2:9f:8d:e0:03:46:11:d7:df:
9e:5c:8e:80:67:ac:a8:fa:f7:f1:cc:2e:b2:71:3c:
3c:96:9d:a5:e5:c0:1c:b4:9a:c8:29:68:66:1e:c3:
1e:5b:80:bc:a4:64:75:55:ef:d0:f1:62:3c:2d:d0:
ba:87:4b:eb:7a:a2:79:a3:df:4e:01:3e:b6:20:ac:
d2:50:7b:03:2e:2e:ea:19:d8:19:e6:70:a8:c0:b8:
f9:a3:7c:ee:dd:4b:47:72:7e:14:79:13:5e:98:b4:
ee:5d:69:a0:e8:ef:cd:2a:46:97:69:95:08:a1:c1:
ff:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137842
sbgp-ipAddrBlock: critical
IPv4:
103.115.156.0/22
IPv6:
2402:ea40::/32
Signature Algorithm: sha256WithRSAEncryption
9f:65:e0:6d:b7:1f:93:00:b6:07:44:74:91:bf:4b:24:75:1b:
d5:64:76:88:df:4f:54:03:62:5a:86:74:ca:e5:46:c4:29:4e:
56:81:70:93:87:ac:2a:4c:22:56:e3:9b:29:31:ed:e7:8a:5b:
4d:2a:77:7e:3c:83:6c:d3:c9:64:c8:fd:a1:e2:fa:48:b0:38:
b3:d0:40:85:92:59:02:ff:3f:03:0e:3e:e3:07:46:3e:ef:a5:
ff:26:52:df:96:5d:4a:a0:6f:0b:56:21:75:1a:83:66:e9:a0:
af:81:04:6f:ea:59:7b:74:19:c9:ef:70:d9:2b:bd:a6:1a:21:
08:5c:77:d1:8a:22:e0:8d:81:61:87:72:01:f6:d1:b5:df:12:
15:bf:3b:54:72:3d:29:f6:e4:81:90:45:42:1a:52:a7:db:07:
7b:9f:d0:71:63:b4:f4:f0:f7:e0:06:a4:23:f2:ed:36:01:f3:
21:30:c1:9c:3f:f9:04:f7:a0:df:9e:8c:1e:c5:c4:ea:8a:48:
f8:a7:6c:4c:75:67:d4:54:b2:5f:8e:14:76:75:82:f4:6c:a0:
df:93:bc:3e:cb:e2:72:8b:ca:53:5c:79:cb:4d:cb:0e:be:a2:
4d:e4:45:c2:9b:30:2e:33:11:08:92:49:89:01:c2:25:fc:5d:
5b:b2:df:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 11:40:36 2025 by rpki-client