Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
File: eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer (raw, json)
Hash identifier: bef4D9s6CiOv6Xa+vxu+0Cosxjq2MdzR6Uf43jIniP0=
Subject key identifier: 79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025CCD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 12 Aug 2025 12:25:59 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 151465
IP: 103.229.188.0/23
IP: 2001:df2:9ec0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Aug 2025 08:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154829 (0x25ccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 12 12:25:59 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A9113A27, serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:1b:23:2b:3e:bd:10:ab:18:64:02:aa:b5:
66:22:19:38:bd:ed:a2:af:d8:c2:6c:ab:7a:6e:0c:
d3:3b:49:6f:15:77:59:17:82:4f:75:9b:1d:76:89:
5f:83:1a:c7:4a:76:6e:87:4a:e0:19:9a:82:c4:ed:
41:09:05:c5:be:bb:33:17:3e:ee:c5:77:42:fe:d8:
ed:f9:33:4d:3c:f6:d2:99:5f:9c:c7:ca:6c:6a:0e:
d2:08:61:26:bc:b1:f4:a9:e7:df:7d:66:55:52:58:
25:a3:60:e2:1e:bb:e5:35:d8:03:a4:35:ce:f6:33:
74:e1:f4:c4:1e:04:76:76:19:ee:66:90:94:36:cc:
c1:30:f2:15:3c:75:3f:7f:f3:c9:cc:0a:b4:6b:26:
33:f3:a4:3f:2b:09:8e:f5:fe:f5:43:2d:22:98:2c:
63:eb:cd:e2:53:f6:5a:81:b5:fb:47:fb:17:76:01:
a3:23:43:9f:41:27:7c:1c:36:92:4e:00:23:c2:2c:
66:d3:17:7c:c3:ba:ce:94:ea:96:dc:3a:be:af:a5:
4e:4c:fc:1b:91:f2:0f:e5:66:50:6f:17:7a:08:50:
95:bc:16:e9:f6:c0:44:07:d9:28:eb:62:ae:6a:71:
3d:5c:af:72:e9:62:3e:fb:21:2d:6f:5b:fb:d6:fd:
11:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151465
sbgp-ipAddrBlock: critical
IPv4:
103.229.188.0/23
IPv6:
2001:df2:9ec0::/48
Signature Algorithm: sha256WithRSAEncryption
6f:82:d5:c0:1e:9a:d8:c1:6d:89:8e:35:c8:d4:10:59:b3:5e:
d1:cd:7a:02:ff:70:35:cc:9d:d9:23:d6:ef:0e:44:76:de:e4:
0b:16:ac:b1:b9:a4:b2:12:e1:66:bf:bb:d1:0a:46:3c:9c:58:
bb:96:4c:cf:41:71:a3:f4:22:ff:79:0e:db:ad:38:24:42:04:
7e:48:65:bd:64:22:6b:98:25:26:f2:07:cb:2c:48:02:37:3e:
68:ed:9b:76:c0:66:06:b7:da:1f:2e:15:84:1a:79:bf:43:bc:
31:fa:3f:0f:ab:e2:af:8c:91:9f:a3:58:a4:28:82:fa:52:0f:
67:99:86:43:b2:f5:af:a4:de:aa:28:50:c2:3e:cf:5c:e8:c5:
1a:26:61:74:df:6e:30:26:43:3e:07:b6:af:21:c9:75:e4:ee:
bf:42:51:6f:8e:83:47:87:fd:26:68:c9:d9:1f:90:3d:9a:4e:
8e:2c:a5:71:24:46:d5:b4:ca:e4:5c:54:5f:80:24:19:c2:69:
89:7f:e0:4c:b6:ff:9e:b8:8d:9b:2a:93:29:ba:0b:2f:05:4e:
bc:94:13:87:0b:91:80:5d:18:f4:d9:d7:5c:4f:21:4a:5a:11:
2d:25:a4:1c:f9:cf:c8:17:09:18:56:b3:52:d2:bb:6a:bf:9c:
4b:96:d3:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:58 2025 by rpki-client