Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer
File: z6g6HLFaT2Y_z9bITI4K00wOBnM.cer (raw, json)
Hash identifier: 9JFUNq/D7Bt1fvtMhYKvqOBhySvJFnniR5u6JAdwbbM=
Subject key identifier: CF:A8:3A:1C:B1:5A:4F:66:3F:CF:D6:C8:4C:8E:0A:D3:4C:0E:06:73
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 026C71
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 14 Oct 2025 00:51:38 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 139222
IP: 103.139.252.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 18:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158833 (0x26c71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 14 00:51:38 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91AA5F1, serialNumber=CFA83A1CB15A4F663FCFD6C84C8E0AD34C0E0673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:c2:6c:97:8f:17:a3:ec:ed:68:4f:41:58:
dd:87:3f:b6:ac:52:94:38:9a:5b:7f:de:aa:4c:0c:
64:29:bb:e7:d4:7b:e6:0d:ad:90:f8:13:78:b6:67:
f5:b1:de:3b:92:4f:b3:81:1d:d5:7d:72:bd:0a:f4:
17:62:ad:65:6d:01:2b:90:d1:e2:6c:6f:4a:3b:f9:
b8:56:7d:b5:e0:ca:9b:d1:dc:65:02:c9:c4:8f:ef:
0e:c3:dd:df:89:e1:c4:04:95:4b:be:13:48:28:34:
41:91:d9:c9:d6:dc:4a:81:d5:87:2a:95:69:69:3c:
44:1f:5e:42:84:79:df:73:fc:ee:75:f4:2a:67:1c:
68:19:36:65:7f:91:d1:c2:4d:0d:3d:8a:93:93:9a:
88:8d:17:05:4b:57:6f:2f:9b:41:dc:ab:dd:bc:d9:
dc:23:b9:84:27:68:5c:5e:b8:fc:ea:af:91:7c:92:
3d:bc:b2:d0:b1:f5:c5:e6:1b:5b:30:4d:07:c0:76:
b4:18:84:62:81:23:9c:d9:d0:c3:be:3c:e6:ba:e1:
96:a4:55:aa:3b:53:27:f7:75:40:e4:0f:2e:30:de:
5a:27:43:a4:96:8c:36:35:b4:fd:e0:16:93:da:ac:
62:d1:bb:d9:63:d6:ba:ae:90:59:13:5b:6d:64:2d:
c2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A8:3A:1C:B1:5A:4F:66:3F:CF:D6:C8:4C:8E:0A:D3:4C:0E:06:73
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139222
sbgp-ipAddrBlock: critical
IPv4:
103.139.252.0/24
Signature Algorithm: sha256WithRSAEncryption
86:84:ee:fa:63:b0:bb:ba:ff:d8:d6:a2:61:01:f4:8f:9a:10:
e7:78:8d:d5:36:9e:b3:a2:2a:17:11:1e:81:28:22:ad:2b:a5:
0b:94:ba:68:2f:26:87:97:ca:88:ce:a7:ce:e1:b4:bd:ec:74:
2e:0a:80:de:1a:a8:2c:85:cb:b1:5f:fe:aa:00:a0:9a:ba:2a:
08:ce:d8:c6:8f:6f:c0:61:f9:a7:bd:51:50:d5:71:ba:6c:a6:
10:1b:9c:93:47:d4:10:b5:50:fb:9a:c0:ed:be:5d:0a:d7:96:
a7:c1:de:ec:e6:ef:f3:2d:d8:97:21:10:03:1e:32:0f:0f:8e:
cc:e0:fb:bd:f7:9d:e6:e1:6f:9a:1b:f8:96:91:3a:8b:24:bd:
7a:27:e2:77:47:f0:68:57:68:8a:89:0b:df:61:c0:40:95:14:
2b:0f:dd:56:0a:4e:a0:11:cf:29:99:a5:77:1a:ab:9f:8d:9a:
df:15:1e:be:42:45:db:f8:ad:62:36:8a:63:2a:62:65:2e:5a:
b3:b5:ba:12:64:69:ec:be:e7:62:4a:ca:ec:76:51:e0:5a:ff:
2b:b9:00:33:07:c3:16:50:28:b2:cf:12:d0:7a:34:be:ab:2e:
81:cf:19:25:b6:a5:83:27:b4:b8:ee:19:9f:90:63:15:b9:83:
e8:d7:2f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:48 2025 by rpki-client