Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
File: Wsl8kSmaL6nIztiqxnD_78e2mhs.cer (raw, json)
Hash identifier: qNEctD2ZNvAoPHZm9UX2OMSXWn15FJV7gsKhXMHRQ2o=
Subject key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024B71
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Jun 2025 22:28:01 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 140543
IP: 103.150.30.0/23
IP: 2405:f9c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 20:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150385 (0x24b71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 2 22:28:01 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91F3260, serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a4:bc:5b:d9:2a:40:09:d3:0f:13:c5:03:24:
2f:12:cc:85:79:dc:6b:04:8f:d0:da:84:a7:59:56:
b5:ee:66:09:a4:de:92:26:40:81:6f:c2:6f:df:66:
ad:ce:3f:20:14:79:07:8e:b6:b4:93:13:fb:a9:65:
25:39:29:cb:36:ff:a0:5d:38:89:b8:99:c8:55:20:
74:64:b7:84:6e:ac:ff:33:0a:b5:b0:32:fd:3f:0a:
1d:0c:43:42:04:d4:8b:f7:bd:31:d1:be:2f:fc:66:
bf:89:7d:cd:be:55:19:79:18:6b:b7:38:2c:3a:f4:
6a:e7:a0:de:46:26:3b:95:61:84:6a:f6:12:99:c2:
d4:49:58:b7:4e:c4:a9:a3:68:39:48:e4:ad:bd:92:
48:2b:14:43:83:bd:35:28:f2:08:14:77:f2:a7:27:
79:66:26:f5:f5:3a:f7:f3:d6:b7:22:10:7f:23:8b:
a9:7e:9a:e3:e5:0e:70:f2:88:5f:72:4d:48:fa:16:
fd:9c:c4:d2:ea:65:54:e7:60:15:3d:43:38:0d:38:
f6:04:01:44:79:59:ff:fd:04:12:9f:7e:d6:c1:3c:
59:18:c8:83:2a:3f:55:80:c3:1e:7c:56:50:de:b1:
12:1d:a9:eb:66:51:f4:55:de:21:74:c6:15:ce:85:
12:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140543
sbgp-ipAddrBlock: critical
IPv4:
103.150.30.0/23
IPv6:
2405:f9c0::/32
Signature Algorithm: sha256WithRSAEncryption
72:51:43:ff:6b:b2:c4:6c:ab:99:d9:02:98:ba:ac:04:bd:a1:
ef:81:68:70:91:db:53:63:ba:58:5a:f0:8b:a5:e9:36:07:af:
9d:cb:b0:82:cb:53:bf:c4:d7:7a:de:80:e5:4d:30:9b:dd:56:
d0:3c:fb:75:66:40:6a:48:b5:50:f4:6d:78:c7:94:18:55:db:
c1:cd:84:61:ff:a6:7b:66:9f:37:6c:58:2c:b5:17:bc:65:c6:
f1:a1:b8:d8:fc:7c:f9:9c:bf:04:6b:af:96:c9:24:8a:6e:7b:
9b:87:19:c8:a8:69:da:15:16:d1:a8:34:9f:9b:17:7d:8b:42:
14:18:56:00:41:b8:83:67:65:8a:6c:b6:10:9b:f0:30:b9:18:
a6:1b:7b:41:17:05:9f:36:30:89:a1:c4:a9:37:92:ab:37:3b:
30:61:cc:e8:a9:4e:9c:0d:6d:ad:d9:4c:0e:d8:49:ec:8b:ef:
25:d3:9b:fa:c4:72:b1:ff:b5:8e:9c:e2:53:a7:cb:83:e4:e4:
59:8f:25:7e:46:4b:3e:53:68:25:8c:15:e8:e9:27:87:55:b2:
7e:f7:ab:2a:ec:49:6b:43:8d:bd:39:a0:ca:24:96:b4:40:25:
23:87:c2:54:73:a3:36:e0:d6:56:d1:f0:b5:b9:6e:3d:24:f8:
d5:fd:8c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:08:13 2025 by rpki-client