Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
File: YBi5hcOZywcxwWNM_ktHkS8q9dE.cer (raw, json)
Hash identifier: 578MpZvvX0xuGpmbmndcHBaTzZD2btMT5Rzxjv7iILo=
Subject key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025054
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 25 Jun 2025 18:35:07 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 139076
IP: 103.139.110.0/23
IP: 2001:df0:7480::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Jul 2025 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151636 (0x25054)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 25 18:35:07 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A9183BA5, serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:99:77:6c:f6:87:ed:ef:59:93:0f:da:2f:
6b:6c:7a:84:2c:d0:07:e0:4d:24:b7:18:69:35:9b:
96:ff:97:ba:e0:59:c4:2d:34:7f:7a:ce:34:3b:f3:
2d:da:ff:ff:4f:30:7b:73:12:b2:7c:2f:4b:5e:fc:
9b:c0:ca:7c:9b:66:1f:ad:38:93:5a:64:0a:ef:09:
94:b7:96:18:5a:09:e5:81:e8:ba:18:d0:41:dc:e9:
7e:a0:e2:b1:d5:e8:e4:ae:78:83:ee:6f:46:0a:44:
23:2d:ba:30:ca:a9:0d:77:5d:f2:b4:3b:b5:39:30:
58:fc:a6:e5:8e:23:d8:76:f6:ca:f3:82:2a:cd:5a:
c4:2b:8d:3d:58:cb:06:e0:a6:cd:b4:83:b9:11:8a:
e6:5c:12:40:07:c4:a9:08:ea:79:22:19:1f:23:3d:
f8:0d:ff:f0:d1:43:15:ad:76:bd:67:56:3d:ba:15:
55:fa:c6:2c:8a:ed:62:0e:3e:99:cc:eb:e1:10:d9:
5e:99:04:d1:b5:a4:1f:83:0f:b8:57:0a:ff:3f:20:
80:55:bd:35:b4:56:cc:69:76:ba:ba:16:03:7e:d8:
1a:05:10:4a:c2:97:73:35:82:11:c9:ce:c2:37:07:
d8:47:80:ee:6b:a5:c3:da:ab:b1:7e:5c:fc:47:71:
7f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139076
sbgp-ipAddrBlock: critical
IPv4:
103.139.110.0/23
IPv6:
2001:df0:7480::/48
Signature Algorithm: sha256WithRSAEncryption
56:44:d8:ba:d5:81:3f:be:c2:f6:51:7c:78:79:36:d4:de:0a:
8d:ae:84:71:30:d2:9e:ab:a4:1e:b5:b4:2f:c0:7f:d9:07:fc:
d1:09:2d:98:f4:20:7d:59:e6:1b:63:95:0a:47:0c:d5:1c:43:
d8:05:dd:12:2e:d3:3c:51:c7:3f:76:9a:2a:3d:fd:63:af:4d:
a4:ed:43:e1:48:08:bb:00:ae:d8:88:ca:14:98:28:24:4a:a1:
f7:64:19:b9:65:19:fc:b4:4c:50:1b:94:97:02:08:7b:bf:af:
0e:fb:ad:67:3e:8c:32:99:71:bc:b4:d3:16:1c:06:2a:50:43:
f4:bf:e7:7a:2b:c2:82:78:ed:8a:70:11:ce:0b:24:43:02:85:
ab:00:a5:d5:c6:0f:38:40:55:38:40:3d:b3:ab:03:ea:75:23:
03:5e:c7:bd:1c:8b:fa:f7:ce:b2:f1:eb:b7:da:b9:85:cf:bd:
7c:f4:2f:99:fc:b9:38:9a:7f:ed:22:ac:1c:9a:bc:66:8d:6b:
17:c1:dc:db:ad:be:4d:71:0f:f4:f8:62:d4:8d:51:f8:71:61:
ed:4b:43:d7:66:5f:21:a5:ee:39:b5:4e:2a:1c:2a:85:fc:7c:
7a:38:2b:73:4a:78:32:e3:cb:4d:4d:14:ac:4e:5c:e3:0a:a0:
ad:63:85:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:41:20 2025 by rpki-client