Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer
File: TPa6KUJsvCB032LFH683jELTuK8.cer (raw, json)
Hash identifier: QFsVa9B5ZQjbqSiC+7Lg5Z8TTXnn2wG+Pt3uZICEWbA=
Subject key identifier: 4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025C99
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 11 Aug 2025 14:15:33 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 131226
IP: 103.37.200.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 09:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154777 (0x25c99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 11 14:15:33 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A9148F50, serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:41:eb:37:19:99:31:9c:69:94:47:b6:09:
1d:ed:44:10:b1:fb:8d:94:29:17:6d:87:31:7f:59:
2a:6a:b0:86:b1:8f:b1:60:61:1d:11:e6:00:3f:64:
48:2a:f0:fb:3b:e0:23:86:96:21:23:e7:f0:79:27:
a4:ca:f6:7e:2f:19:5f:e9:72:f7:8c:80:97:cb:00:
86:95:50:3e:66:9d:01:f4:28:76:f1:c6:f8:3e:4f:
9e:fe:91:44:06:c4:77:12:f5:c6:b2:e7:a8:bc:4b:
a5:b4:ab:f3:e2:51:63:67:6d:e3:53:24:c3:d9:53:
9a:95:36:2a:78:e1:5b:d7:f4:9c:0f:31:dd:a8:e8:
0e:a1:bb:cb:e9:c1:6e:09:d6:5f:0d:bc:77:a2:af:
69:03:56:28:66:2f:b1:39:40:8a:b1:a3:d0:33:89:
28:47:df:a9:77:3f:78:4d:53:56:46:3a:e4:33:5e:
2f:73:7a:42:75:ea:6c:de:92:de:46:f2:bc:48:dd:
45:7e:d8:6a:f7:a7:77:13:6d:ae:bb:ed:6f:82:ca:
cd:75:5c:1c:d3:68:07:b5:53:ed:9f:f9:36:ce:af:
e4:25:a0:14:14:a2:0e:c7:d2:5c:52:c5:0d:bb:08:
6e:da:92:f4:8b:10:5d:f9:ea:27:37:f9:e1:e7:a2:
f1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131226
sbgp-ipAddrBlock: critical
IPv4:
103.37.200.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:bb:ed:39:fe:8a:29:c0:7e:26:fc:94:2d:c6:d3:8d:65:6e:
11:ac:4d:30:94:39:64:4f:ce:ae:ff:9b:e4:a9:d2:53:d8:72:
93:c5:8c:a5:93:93:f3:2a:88:5e:77:af:27:58:3f:f8:52:5b:
45:74:91:f1:e3:a7:9e:3d:9f:d2:62:84:8f:6f:e7:b7:6f:fa:
38:56:bf:47:5b:46:a7:f6:ff:19:9f:9c:6a:30:38:5f:75:1d:
02:7a:4a:c4:65:a5:f8:ac:2d:6d:bd:1d:fb:5a:c4:85:cd:f9:
e2:9e:4c:7a:28:31:88:74:04:87:31:39:74:67:92:d0:2b:1f:
66:10:d4:ab:3e:87:78:c1:d0:c6:cc:86:52:99:96:44:34:d6:
13:86:8d:92:30:10:b6:ed:cd:74:36:de:9f:f9:bd:78:b8:c8:
37:c2:28:a6:be:23:31:50:fa:39:50:ba:1e:7c:ff:7b:30:ca:
76:d9:49:e2:1e:bd:1e:d7:1d:49:31:b7:91:9f:f6:1a:2b:9a:
0a:8b:57:ac:4d:a1:98:f9:a9:85:43:13:1d:d9:f6:a5:aa:a5:
c4:56:b2:ec:09:2a:40:5a:b7:82:75:a6:cb:86:69:55:3a:c2:
98:61:b5:c2:9c:75:63:71:af:5d:e7:23:cf:c0:00:f2:b6:88:
4a:45:b4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:55 2025 by rpki-client