Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer
File: Sn0mxMvxZwAkXWf79pULcSkYmTk.cer (raw, json)
Hash identifier: QzqKQmu3/bjaDzqcrYlYVjAuolYnvGQOAyxQE3Y1Ksg=
Subject key identifier: 4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024FA3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 23 Jun 2025 05:45:48 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 151661
IP: 103.253.179.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Jul 2025 06:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151459 (0x24fa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 23 05:45:48 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91839CF, serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:ae:e0:60:f3:c2:f2:f1:e4:c2:cc:21:08:
42:09:4f:27:d6:22:1d:be:cf:ca:66:82:c1:96:f1:
2d:ea:b2:28:64:1f:ee:fc:8f:88:aa:fd:e3:13:98:
0c:7f:e0:d7:48:b1:24:74:a2:f3:72:75:01:92:93:
1d:58:f3:56:79:e6:a9:dd:af:de:70:24:fb:3a:18:
37:dc:43:38:da:e3:92:74:47:3c:41:4b:6d:0b:06:
dc:ec:4d:06:17:4e:64:1f:5b:a8:f6:38:bc:b7:05:
b5:a8:c7:94:5f:a7:7b:08:3b:81:b7:4d:75:c9:7c:
a3:ee:95:28:19:68:e4:74:33:33:82:e8:40:75:52:
90:82:9d:c6:ba:83:d4:19:6d:97:18:eb:b7:c9:71:
da:39:f6:0b:6d:51:63:26:af:67:44:5d:44:a2:28:
3a:f2:23:c3:8c:0b:6b:22:bf:25:ee:ba:d4:6e:2b:
0f:00:98:f7:c2:72:cf:08:13:f2:e6:9a:9f:8f:c9:
eb:1b:1a:be:47:83:54:d7:29:45:d7:1e:27:34:e9:
c0:42:0a:68:c5:c3:e4:a2:5e:eb:e9:52:70:23:7d:
64:bb:df:d9:ac:3f:54:7e:1e:53:e4:ff:31:fb:3b:
6b:11:14:b4:0f:bf:7b:48:e6:9b:59:1d:68:19:31:
d5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151661
sbgp-ipAddrBlock: critical
IPv4:
103.253.179.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:78:7f:b7:e3:b6:bf:49:7b:53:74:79:75:a7:30:af:0b:b2:
e3:ad:3c:a7:4e:3f:38:12:49:4b:8f:e2:5b:0c:5a:78:85:19:
37:d3:0e:b4:2b:52:e5:a0:ca:de:a5:7c:04:4c:16:e4:78:a1:
4f:da:eb:a6:1a:4a:94:37:ad:e9:6f:81:e6:10:cd:ce:8d:bf:
b2:94:9d:a3:eb:f9:16:02:ab:98:25:d2:bb:0e:9a:2f:6b:ef:
bf:ac:cf:bc:34:f9:34:27:21:bf:d1:18:35:e7:fc:fd:9c:99:
50:f7:a1:61:ed:96:07:9c:dd:aa:f2:30:00:18:25:2e:dd:28:
4f:e3:73:7d:f4:21:10:94:da:de:ac:bb:6c:49:cd:9a:01:77:
d9:7e:2f:55:18:ef:f4:ba:03:7d:dc:92:34:0a:7a:76:c4:cc:
29:fc:08:e1:13:10:4a:59:cf:b2:96:55:08:ea:18:91:7a:bb:
ec:c7:9d:e6:36:b1:09:37:06:a5:c9:ce:89:9a:f5:3c:12:ab:
6d:ae:16:0a:9c:c7:f4:3b:c4:69:26:95:5c:eb:9c:3e:c7:9f:
f0:39:74:59:e7:f4:76:9e:4d:f8:95:4e:31:66:38:00:95:84:
73:88:58:24:3a:a0:12:e8:b5:85:3d:ab:46:6a:12:83:1d:0d:
fb:6c:54:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:36:38 2025 by rpki-client