Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
File: 6N-NXkyE2ofXKac8HE6GETgassE.cer (raw, json)
Hash identifier: 3e7r0R0Un7LbgDS4ZzxcDuAsXBU7Vm4o8TbGbhqmZGg=
Subject key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0255E4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 15 Jul 2025 20:50:30 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 58601
IP: 43.245.192.0/22
IP: 103.9.112.0/22
IP: 2403:e100::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 12:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153060 (0x255e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 15 20:50:30 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:d6:2c:bf:e7:2b:ca:9d:b3:82:06:10:8f:
31:22:ec:93:0d:f8:0e:e0:7e:97:b9:bc:85:c5:ad:
58:fd:52:46:04:fd:38:90:47:6c:97:f8:21:75:e2:
f6:d8:aa:4f:8b:c2:b7:b2:16:e1:f2:56:41:6b:4e:
bf:72:3b:a6:60:aa:ae:08:6a:ea:74:72:3e:d6:53:
5a:1f:80:62:a5:26:2c:55:08:95:dc:9f:78:d0:6c:
e2:43:40:47:5e:75:7e:72:ef:2a:b8:bf:ae:09:9e:
8f:59:03:b0:b8:9a:d2:b7:d9:1c:4d:84:de:cd:96:
00:f0:31:c5:1d:6a:a3:10:2d:bf:cb:c3:08:7b:53:
b7:6b:84:aa:4a:64:9e:d6:b5:51:07:27:57:a9:af:
fb:54:4a:56:e7:1e:5e:27:6d:3e:ec:93:5f:7d:68:
a7:6c:d5:a8:8e:09:6e:44:84:ef:d3:cd:8e:2f:9d:
2d:1d:78:79:9b:1f:e1:72:6d:77:d2:1a:93:b1:11:
05:4e:dd:24:83:94:6d:71:e1:af:5d:6f:7c:b6:7a:
7a:59:07:fa:37:39:fc:da:91:73:4f:17:be:eb:49:
34:2b:7a:d8:d5:94:e7:c8:cf:06:1b:24:ae:98:ed:
de:2b:6b:41:21:33:86:8e:f6:28:4d:1d:02:a6:0f:
a9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58601
sbgp-ipAddrBlock: critical
IPv4:
43.245.192.0/22
103.9.112.0/22
IPv6:
2403:e100::/32
Signature Algorithm: sha256WithRSAEncryption
52:4e:14:5c:2a:7b:a1:d5:01:3d:4d:bb:5b:7f:3a:89:59:7f:
2b:27:51:d6:3c:ac:d0:d0:ed:1b:74:67:4f:c1:e9:86:84:38:
11:48:1f:c8:1d:9b:e0:ec:ad:42:6b:1d:98:69:cd:40:73:9a:
e3:59:2b:1c:b8:11:2a:64:09:f7:d1:3c:96:0c:f8:84:ae:2a:
7d:9e:a2:3f:0b:c0:4e:b9:c1:3e:7c:d1:77:3b:a1:77:6f:fc:
65:81:93:39:21:35:b7:9e:56:57:0c:04:04:8a:39:29:1f:f1:
24:5c:9f:0c:3a:9f:73:5c:26:2f:a3:2f:ab:8b:83:fc:3b:00:
15:3e:d0:1c:b4:aa:56:50:a6:00:ae:2b:10:ae:0a:38:be:a1:
e5:c2:2f:f5:82:80:f1:97:a1:da:37:10:f0:81:14:5d:d3:22:
39:08:14:04:ad:39:6a:3a:b1:9c:b7:2e:eb:fc:11:0f:17:18:
d4:80:cc:69:43:08:22:04:33:c9:57:18:3b:5e:0d:0d:46:46:
d4:3f:2c:02:3f:18:5f:a6:c2:cf:31:e3:fb:54:6a:21:d8:99:
ee:57:30:c7:1a:fd:30:9e:75:7e:8e:bc:68:fb:de:d4:45:16:
8f:22:ea:c9:6f:47:34:c7:a5:d4:d1:fb:92:c3:84:71:1f:aa:
fe:8f:65:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:28:03 2025 by rpki-client