Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
File: qXEsy37uAkrriHZ7di4Qk7FA_24.cer (raw, json)
Hash identifier: aF5678c2iPdMgFGyHooOLo7LP4ErC0ZxH8PXsfoLjpw=
Subject key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02510C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 29 Jun 2025 13:21:59 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 59382
IP: 103.237.36.0/22
IP: 160.202.144.0/22
IP: 2401:e7c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 20:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151820 (0x2510c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 29 13:21:59 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:0e:71:c8:3e:e6:6a:1e:5a:3e:ad:63:ec:
81:2c:b4:52:cf:92:6e:77:17:52:44:40:49:cf:59:
d1:51:19:57:3e:9f:92:3f:c5:d0:45:1f:16:cc:f6:
47:e8:b7:49:6c:91:c0:a5:1e:20:6a:3b:1a:38:1d:
f6:62:7e:01:90:21:87:98:df:c0:c9:ec:b1:e4:68:
dc:89:85:1c:f5:cc:6c:c6:ff:21:b0:ad:da:5f:cc:
2e:02:f8:1c:b4:5a:a8:f8:12:6c:61:10:4b:1b:56:
c6:ba:38:68:a0:6f:00:a0:c8:ac:a9:6c:b4:a4:9d:
f5:26:2e:2c:c7:4b:a0:4b:97:74:fe:b7:4c:cc:69:
d8:92:d8:9c:f7:1e:a9:0d:b7:a8:5a:30:95:fc:ef:
c9:f0:76:69:25:8e:5d:19:0a:a3:e5:ac:59:9e:12:
42:f1:b1:eb:d9:bd:d0:e3:3d:92:1a:35:4c:9f:9f:
82:64:79:ab:29:90:ed:c7:64:da:96:76:81:ee:e7:
c7:cd:50:c3:34:f3:db:36:ea:d0:05:21:75:9c:07:
d0:8d:55:c0:72:94:bf:55:ca:68:fa:19:03:56:3a:
b0:1f:ec:32:a1:7a:c9:f6:7c:d1:01:8a:4b:b3:06:
21:db:21:28:57:9e:7a:08:0e:3b:0b:5a:57:b0:e5:
a2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59382
sbgp-ipAddrBlock: critical
IPv4:
103.237.36.0/22
160.202.144.0/22
IPv6:
2401:e7c0::/32
Signature Algorithm: sha256WithRSAEncryption
35:12:27:fe:a1:b7:ff:f5:ee:ac:8c:5c:e0:d6:4b:ff:0e:8a:
97:7a:b2:79:27:af:72:ec:82:59:f2:5d:98:8e:01:33:38:60:
bf:bb:95:b9:73:bf:8b:df:2a:1b:3c:71:3f:40:d6:b4:85:14:
01:0e:fd:cc:49:84:49:f8:c6:c7:89:6b:2b:f2:3f:14:94:89:
97:56:4a:79:52:6d:90:d7:64:0c:17:ad:be:3e:0e:cc:e6:dc:
8d:69:0c:3f:6e:4f:ed:2f:8f:eb:c9:ed:87:a6:7a:cb:e2:f5:
b2:b5:ca:30:4f:d0:97:6c:7c:dd:09:cc:f6:a4:4d:d2:b0:7b:
e3:dd:5c:d4:ec:78:8b:fd:d0:66:a3:fa:6a:04:4e:4d:11:9e:
dd:36:76:52:4c:1c:05:70:75:3f:79:0d:6e:15:47:19:53:38:
91:61:16:e9:ad:95:e8:b8:d9:f2:ce:58:6b:42:83:d8:c7:98:
4b:38:58:45:d1:e1:2d:2c:44:1c:88:1c:c5:7d:69:ad:10:a8:
97:85:3c:9a:9b:89:fe:e8:6d:19:b6:7c:74:85:c9:b6:09:45:
b0:73:64:ed:aa:55:3c:bc:72:7f:ab:05:1e:42:74:fd:5e:bf:
d7:e4:e2:2c:c2:e1:f8:9c:a5:22:f4:ad:31:93:38:2a:6c:bf:
25:56:b5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:24:39 2025 by rpki-client