Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
File: aSE1YIaDdV6U2OylfYsLNY7OFxg.cer (raw, json)
Hash identifier: 8bOavKH4+sETZHZ+uxjaKcYN/Mf9HKUeusBkGElwKrY=
Subject key identifier: 69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024E8D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 16 Jun 2025 17:41:57 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 132088
AS: 138986
IP: 103.115.140.0/22
IP: 2402:e940::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Jul 2025 20:43:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151181 (0x24e8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 16 17:41:57 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A9198996, serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:ad:dc:c6:98:5c:a5:3b:87:d4:ac:cb:13:
df:c6:d3:66:f0:d8:53:5b:78:c6:49:c6:18:e2:54:
d5:35:72:73:d6:f5:2a:30:2b:72:98:02:79:4d:52:
8e:20:81:04:d6:34:8e:ec:fa:e9:59:04:44:5e:c6:
74:58:11:01:6b:4c:26:59:88:bd:76:45:c6:a7:d3:
83:cf:39:64:4b:d0:cb:da:45:dc:46:53:c9:2a:df:
11:f8:2e:af:31:09:41:10:03:7b:32:95:75:2f:25:
ab:e6:ba:38:70:dd:04:1e:17:5e:c7:c3:19:62:cd:
22:eb:aa:c5:64:12:9b:a0:8f:0e:57:77:de:ad:ae:
9f:3f:13:51:a5:f7:6d:39:b9:f5:8d:dc:a9:ce:14:
98:88:6d:d7:22:4e:1d:86:5e:77:e7:44:ae:b9:bf:
c5:2b:0c:c9:4e:bc:ca:eb:b5:fb:53:2f:3b:7f:b1:
7f:03:96:c8:d1:dd:3f:1d:3c:d9:32:5d:3e:75:e9:
bb:ee:33:5f:fe:58:ac:57:8f:7f:eb:50:27:70:86:
57:bd:de:86:9a:d6:06:ec:63:c4:84:2a:64:c8:d3:
76:42:ad:33:e5:3b:27:30:82:80:cd:fe:ba:cf:31:
8a:47:ba:0f:a3:f0:11:7a:7a:d3:62:43:01:e6:c1:
1e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132088
138986
sbgp-ipAddrBlock: critical
IPv4:
103.115.140.0/22
IPv6:
2402:e940::/32
Signature Algorithm: sha256WithRSAEncryption
22:d4:a5:75:6a:42:1a:3f:d5:63:c3:15:9b:3a:98:b6:bc:22:
40:08:13:72:6f:94:ac:ba:99:43:e7:98:0f:8f:57:bd:9a:31:
43:25:52:6a:0c:60:d0:c8:76:cd:ec:3c:6e:f3:da:c7:fe:f9:
3a:8f:0f:56:b4:12:c6:8d:7a:a1:b9:06:1f:84:cd:85:be:6a:
e1:9c:d3:a8:62:2e:6a:79:59:43:59:4e:51:dc:42:9c:0e:97:
a0:de:be:9e:35:df:09:c8:71:c9:30:85:e2:b0:7f:47:26:2c:
19:5b:b9:50:8a:0a:cb:cb:a5:50:86:67:0c:d4:7e:0f:4f:a3:
64:f5:eb:06:40:70:ba:7a:be:64:5d:02:61:3f:f9:db:53:77:
72:0e:ce:99:ac:6a:e3:6b:23:ab:4d:6d:c4:ca:17:d1:8f:3d:
96:ac:c1:01:ee:fd:92:49:0c:bd:ba:49:bc:4d:74:cd:cd:48:
43:55:38:03:36:5a:fc:3b:37:2b:93:b9:e3:06:6a:06:6b:e4:
84:b0:41:6e:09:6d:00:a0:8b:50:91:23:27:d0:f6:44:7e:c5:
6a:98:bf:93:5d:f4:ea:8b:7d:ab:a1:51:ae:c0:95:99:08:0b:
05:77:72:db:a5:be:f1:bb:5c:3f:0a:d6:da:5f:74:fa:af:92:
fb:7c:99:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:36:46 2025 by rpki-client