Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer
File: sjZrmQQ2twaLXyVculqgXp29v30.cer (raw, json)
Hash identifier: J7NrleVUYT2WrpUYheR3Dj00MgZTWXOm0mx5seWYBJQ=
Subject key identifier: B2:36:6B:99:04:36:B7:06:8B:5F:25:5C:BA:5A:A0:5E:9D:BD:BF:7D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025271
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Jul 2025 05:04:52 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 150155
IP: 103.15.38.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 22:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152177 (0x25271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 2 05:04:52 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91C9327, serialNumber=B2366B990436B7068B5F255CBA5AA05E9DBDBF7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:67:a1:19:69:36:03:1a:b1:6f:63:4f:e5:70:
9b:41:6b:a2:2b:7d:93:b2:c7:4a:2d:ec:bb:5f:56:
11:24:57:6b:b6:58:99:33:1c:00:68:03:c6:94:12:
b6:6b:83:aa:19:8f:41:e0:43:d1:77:a6:99:55:15:
d0:fe:7c:da:da:b2:d9:ae:bc:af:2e:0f:58:1c:33:
af:43:72:6b:e0:ea:59:b2:1a:1d:ca:01:00:39:3c:
da:8b:40:f9:98:48:6a:97:da:1a:b6:07:7e:fb:6c:
83:73:12:bb:62:4b:a4:fe:15:39:40:90:45:06:8d:
55:1c:df:9c:ca:7c:19:36:af:3d:41:c8:4f:68:0b:
17:42:7c:72:6b:e3:39:c3:6e:8b:df:da:b9:68:c2:
ab:ad:d5:54:b7:33:fa:07:4e:62:a1:da:e2:5c:42:
50:01:7d:01:f7:b7:60:f1:9e:fd:a6:c0:9b:4f:20:
e0:a1:29:ad:ed:96:42:e1:09:62:68:92:01:62:7d:
c1:94:e7:83:c2:bb:2a:07:71:e4:99:c8:8d:3a:29:
2c:54:fd:f4:13:71:28:33:fa:65:71:6a:b3:97:30:
15:1e:7b:0f:79:c8:df:43:8e:ca:e9:cf:c4:ae:1c:
f0:be:44:08:fb:67:54:41:bc:04:83:96:72:07:cf:
88:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:36:6B:99:04:36:B7:06:8B:5F:25:5C:BA:5A:A0:5E:9D:BD:BF:7D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150155
sbgp-ipAddrBlock: critical
IPv4:
103.15.38.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ad:45:67:4d:28:65:0c:f0:b6:96:ee:99:1e:d8:21:04:26:
f3:ec:6b:79:b0:88:b4:05:74:86:16:55:02:88:08:2d:4e:45:
4b:d0:33:d2:84:83:70:28:4c:4c:30:75:67:2e:13:5a:bf:82:
ec:a8:ec:a6:26:b4:1d:b6:dc:73:90:ea:48:f4:e1:da:5b:7c:
f9:2c:21:fe:39:16:ba:f1:8d:f7:a3:42:91:41:79:98:09:8d:
b7:09:5a:7f:e3:6e:c0:93:99:a6:9c:70:49:cf:ba:cc:a5:56:
9f:76:1a:3a:70:4b:9a:dc:10:c3:28:63:b2:69:10:9f:d8:e1:
52:f3:d0:98:f8:d2:a5:56:10:c5:3b:0d:9c:36:9c:89:1f:2d:
94:86:7d:d0:7b:70:ae:bd:d3:da:09:fd:97:6a:02:85:54:ea:
93:01:e9:bc:e0:79:87:7b:0e:15:97:37:96:cd:cf:85:1e:60:
ed:c9:4b:bd:c7:0a:df:3e:7e:12:4a:03:f1:12:d4:11:3a:1f:
bb:e2:23:92:07:8f:28:de:23:7d:72:ac:1c:f2:86:59:9f:9f:
fd:51:07:80:c7:ce:a8:19:00:ab:9c:a1:54:c2:a6:58:c9:98:
bd:f5:27:14:89:40:0d:05:0c:6a:f0:dc:de:f3:18:ca:a3:d2:
b1:2c:08:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:58:12 2025 by rpki-client