Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer
File: SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer (raw, json)
Hash identifier: pBoTezXAa++bxIjleK5sA7uzA2DQnOga2nJ/G+iTKEw=
Subject key identifier: 4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025F07
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 22 Aug 2025 18:39:57 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 132218
IP: 103.71.57.0/24
IP: 2001:df3:ea00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 08:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155399 (0x25f07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 22 18:39:57 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91CF364, serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2a:b3:55:db:c2:7b:aa:ed:a7:55:20:a2:f4:
b9:e5:1c:ec:07:d3:97:43:83:8d:ab:c3:32:86:34:
42:fa:e6:4c:70:e6:72:79:34:4f:ea:89:88:ce:22:
0e:19:e9:d4:60:a5:c0:7f:d3:7c:4e:c3:51:a1:37:
3e:0e:67:cb:6c:d1:16:08:3d:bb:b3:7b:88:31:f6:
c1:cc:7d:50:fb:0b:0a:ed:25:29:fc:70:da:19:74:
0e:12:46:fc:19:11:48:27:92:e5:d1:3e:fa:4b:56:
44:56:78:e9:0b:75:63:b9:88:07:42:77:d1:70:f1:
2b:c0:30:d0:a5:64:8f:a3:94:ff:45:d7:a9:de:ca:
7e:77:d6:78:92:f9:e8:bc:cb:bc:30:8b:23:88:61:
0b:92:8d:fa:3e:82:36:93:63:ea:36:5d:3c:dc:ad:
32:69:30:83:16:50:87:c9:c5:74:45:98:d8:4e:d8:
e0:ae:b3:2e:3d:80:c1:a0:fc:ce:75:1c:4c:65:41:
7a:2e:d5:42:02:07:5b:f1:d1:5d:06:0f:29:05:d2:
23:be:34:d0:04:6b:6a:2c:55:6d:dc:6a:27:c1:73:
5e:b9:38:80:52:d9:e6:1a:7c:ca:42:34:55:5a:84:
fa:2b:9a:bb:ed:fb:4c:28:70:72:d4:49:6c:44:5d:
52:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132218
sbgp-ipAddrBlock: critical
IPv4:
103.71.57.0/24
IPv6:
2001:df3:ea00::/48
Signature Algorithm: sha256WithRSAEncryption
3e:14:b6:8f:8a:d0:fb:6c:c1:17:cf:21:ff:61:fb:fe:fc:92:
dc:f3:d2:e9:d0:41:1f:8c:a3:ba:07:e8:62:a0:da:4d:5b:39:
85:79:28:2d:8a:7e:3b:ea:e9:3f:5e:87:dc:d3:27:e0:c3:00:
ec:7d:a2:31:2c:be:89:c4:5b:6b:d6:c7:73:b6:4f:df:ca:5b:
77:19:21:ac:cb:41:71:4c:88:af:34:fc:70:de:39:df:ee:d8:
c6:c6:69:5a:5e:c8:75:dc:bd:bd:59:4b:41:3b:2b:71:ed:34:
12:76:b4:d4:b8:67:d8:79:34:ff:db:62:c3:92:b5:75:e5:17:
63:14:8c:c8:ef:c9:04:d5:f0:96:5e:f4:6e:34:e7:31:dc:7c:
80:62:f3:24:13:9c:9f:95:b2:a8:87:42:31:18:8f:9c:13:6e:
bd:05:9f:9a:a0:02:f3:04:89:db:ed:a6:e4:d5:44:1d:97:e2:
6e:7e:3c:aa:42:19:a1:92:84:0d:8a:c3:29:7f:f9:2b:2b:90:
dd:4f:65:ed:70:89:07:19:35:d4:85:7c:cd:e5:52:4a:78:48:
5b:57:97:e2:b3:a8:97:8b:54:74:e3:00:0d:93:a3:b5:0e:7d:
b6:b2:b7:33:29:54:91:aa:5c:57:48:74:13:0b:7f:61:94:08:
ad:1f:a3:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:15 2025 by rpki-client