Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer
File: jH1rofFVCazzExWCWX1crZ5Bm08.cer (raw, json)
Hash identifier: 7eIFT/eWggmQP9AwogACg4cIFSH0gUSkQV9eqs+Zv0A=
Subject key identifier: 8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025422
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 07 Jul 2025 21:37:15 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 2402:af40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 09:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152610 (0x25422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 7 21:37:15 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91E46B1, serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c2:c7:4b:c7:dc:f7:5c:fc:13:84:c5:f1:72:
ee:d2:d7:78:d1:80:23:16:c0:a9:9a:43:7c:51:36:
04:32:d0:23:0f:36:23:e6:c7:94:26:82:5c:e7:95:
e6:5c:93:a3:eb:03:37:b6:c4:33:af:3f:74:b4:99:
2c:bc:b0:f0:63:71:28:84:38:4a:23:d4:55:17:30:
ef:95:5e:46:f3:82:7a:c2:da:29:68:7e:87:8e:9c:
b4:ff:5e:40:ec:f8:7b:10:f5:31:e5:5e:28:5d:f0:
b3:6f:05:ac:e8:0e:14:e4:f9:89:7b:5b:01:19:5e:
fb:0c:b8:0d:df:31:26:9f:67:d8:71:5e:17:af:67:
20:96:2b:a0:d3:b3:8d:bd:e2:fc:d4:6a:72:8b:bc:
d8:cf:a3:c6:d3:a1:c6:8f:4a:10:51:b8:52:53:83:
61:14:74:2a:a1:05:60:90:62:3a:47:57:0d:50:bd:
d7:a6:eb:16:8a:58:9f:d6:dc:e1:d9:06:cd:9c:53:
b1:e4:a2:52:f4:68:3d:6d:06:ad:26:75:92:92:ab:
d7:30:34:c6:a6:31:91:dd:13:e7:94:76:ae:52:a7:
e5:17:30:f0:27:80:68:04:7d:17:b3:16:81:8c:26:
a9:be:7d:13:13:6d:00:6d:26:74:62:59:f1:06:e3:
bc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:af40::/32
Signature Algorithm: sha256WithRSAEncryption
32:24:97:a8:2b:b9:01:93:de:ab:9d:05:20:35:36:01:60:8b:
d6:e4:c5:bd:d1:d3:8c:25:da:6f:de:b7:51:38:4b:fd:cc:8d:
25:aa:88:e2:f0:ec:f9:f1:11:18:ba:41:25:6c:3d:17:18:a9:
f6:5a:88:be:d0:c5:28:eb:b5:19:01:fb:0f:f7:d7:a4:1f:81:
73:a3:ca:b6:00:17:67:d7:85:c2:67:93:df:1e:eb:d3:5c:14:
50:bf:d2:53:09:34:1f:6c:1f:5e:61:d3:4d:ab:64:c4:62:0d:
4f:10:bd:dd:bc:94:d0:2d:8d:f2:45:2c:4b:39:e1:6a:66:21:
9b:76:a4:ed:bc:72:29:92:18:30:c6:3c:30:d7:dd:d4:15:14:
94:fb:63:42:b9:f5:0e:02:b9:b3:34:3e:74:89:62:fb:01:fd:
c9:52:47:df:9f:18:35:91:76:c4:5e:c6:e5:81:45:22:68:34:
1b:e3:17:13:e0:f4:b9:38:b2:1d:e9:09:85:c4:b4:cc:dd:d8:
1c:99:6c:54:9c:99:c6:1a:46:d9:bc:77:8b:c1:4a:ad:67:de:
68:7a:70:6a:b4:bd:a8:6b:6c:5f:1a:bf:71:f3:80:00:b7:df:
0d:88:a9:f1:5f:59:99:4a:29:45:3f:86:15:6c:24:89:53:00:
4a:33:f1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 10:38:09 2025 by rpki-client