Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer (raw, json)
Hash identifier: 5SIiOguz3lF4jq5lU9PzZNcSeuLhC4a6gn7I3h0KfXs=
Subject key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024C97
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Jun 2025 12:21:39 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 134221
IP: 45.119.6.0/23
IP: 103.49.92.0/22
IP: 103.59.48.0/22
IP: 103.84.92.0/22
IP: 2001:df6:9b00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Jul 2025 10:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150679 (0x24c97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 5 12:21:39 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:85:45:d0:78:4b:09:95:1b:c0:04:6d:fe:
9d:25:69:e8:73:8d:c2:2a:bf:c0:da:ff:b4:4a:ab:
40:76:69:7a:54:9b:4b:3d:bf:86:00:9d:72:ee:cf:
cc:b6:56:ec:4d:83:a2:05:7a:15:c0:64:50:ff:c1:
bd:b9:c4:72:ed:28:5d:2a:1e:c8:88:6d:5f:bc:f1:
13:68:3c:02:ce:f7:43:e4:36:3d:fa:89:4f:e5:f5:
b1:ef:03:d7:56:fd:c3:cf:d3:90:d9:c4:30:47:a4:
ca:30:73:d1:4f:fd:be:fe:db:fc:ef:59:9e:4e:06:
cb:fe:f8:d8:51:34:bd:d4:96:3d:50:e9:65:66:37:
80:96:31:31:86:5a:03:2f:22:1e:ee:87:ab:dc:90:
81:b6:66:8d:0e:78:e1:31:1d:3e:ef:4d:3c:2f:07:
da:f4:61:87:35:52:72:eb:3d:09:b6:51:d5:3c:76:
11:fe:92:c4:7f:27:cf:d6:de:d9:d1:4f:d0:65:64:
d0:a3:cc:ac:94:ec:3b:d7:b3:d3:3b:f0:d6:49:80:
9e:28:15:61:f9:c2:8e:ae:60:15:7a:30:5f:04:e0:
b8:92:9c:e5:91:bc:a7:a6:08:86:ea:16:b7:ee:ee:
d5:f0:04:aa:87:06:98:00:94:2b:a0:41:d4:7c:1b:
6d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134221
sbgp-ipAddrBlock: critical
IPv4:
45.119.6.0/23
103.49.92.0/22
103.59.48.0/22
103.84.92.0/22
IPv6:
2001:df6:9b00::/48
Signature Algorithm: sha256WithRSAEncryption
9e:ad:6e:a3:a1:39:64:8c:61:04:f2:16:62:08:8e:cc:7a:eb:
77:a8:ef:18:aa:31:81:6b:2e:16:06:d3:13:47:41:8b:34:d7:
90:47:35:33:2d:ef:74:45:ad:39:59:af:c5:76:b1:96:6e:6d:
63:e8:33:ea:1f:ef:52:7d:9f:90:a9:7c:bb:2d:26:b9:e3:b2:
f5:91:17:dd:c5:74:a8:c7:cb:25:86:0e:1c:f8:42:ac:a0:87:
07:dd:c0:92:c3:9b:44:15:65:ae:62:f9:e3:19:e8:cd:11:e5:
1c:8c:d7:32:01:0e:98:a9:bc:12:a5:0e:bc:79:13:59:31:3b:
34:70:b8:23:51:ad:59:ff:5c:ae:1b:b6:ba:84:09:6b:51:11:
f4:72:89:d2:38:f3:ab:06:72:43:ca:12:e5:0e:05:ae:43:f5:
53:73:83:07:4f:e3:5d:9c:f5:f9:61:13:2d:a4:fc:70:d7:26:
ea:84:9a:96:53:b8:73:38:4a:ba:09:f9:9e:ba:e2:0e:c5:c1:
54:68:89:09:e1:b5:f0:76:db:ab:40:fc:8b:1c:d6:d8:57:c2:
35:5c:ff:b4:b8:80:44:5c:d5:53:f9:32:bd:a6:10:6b:9c:33:
19:61:ec:8e:4d:43:3a:68:02:fa:d5:fd:33:99:52:36:b7:cb:
6c:cb:a9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:43:28 2025 by rpki-client