Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer
File: lRaRgJV2AETnT6qlSX0GcwraXzI.cer (raw, json)
Hash identifier: GtnUd47LayzC0js9r/Z6wepamadPn4vw/LEsqIenP1M=
Subject key identifier: 95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02536D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 03 Jul 2025 22:51:44 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 55555
AS: 55859
IP: 43.245.28.0/22
IP: 103.246.96.0/22
IP: 180.200.244.0/22
IP: 2400:b100::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 31 Jul 2025 03:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152429 (0x2536d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 3 22:51:44 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91B334D, serialNumber=9516918095760044E74FAAA5497D06730ADA5F32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b3:4d:ef:83:01:ea:6f:fe:a3:37:5b:23:e5:
7b:e0:93:2b:46:e0:5c:67:c3:50:cc:f1:db:da:b7:
02:d1:d6:37:c6:ba:21:0b:fb:72:1b:d0:a4:5a:50:
49:05:4b:88:35:4f:f4:3a:f8:51:23:5c:09:3b:86:
81:d4:f6:33:ce:cf:9d:5c:d6:30:ac:83:9a:8d:07:
fe:c4:ae:4e:f3:6f:8d:75:dd:a2:d5:19:58:01:e1:
e1:53:80:89:08:0c:5a:ee:d2:5e:00:bb:bc:dd:d0:
ab:2e:34:71:c6:7a:71:62:2d:cd:85:c9:77:6c:25:
d3:31:a2:d8:09:29:74:80:a2:db:7a:f8:df:fe:b0:
4f:54:60:dc:b3:d2:59:51:73:5f:3e:ed:b7:9c:25:
32:ac:ea:0f:81:28:a6:b0:66:83:ce:af:62:c9:77:
70:e4:6a:8a:41:09:03:fc:a8:a2:6f:bc:b0:5a:b0:
ce:50:36:a6:bf:a7:74:82:9b:90:78:95:3d:85:65:
20:a0:ff:39:d3:70:f1:a3:74:56:b0:e9:e4:a3:1b:
26:db:f3:f3:71:d2:50:eb:03:f4:70:2e:e5:c9:40:
2d:ee:39:48:68:f9:bb:55:ec:50:f2:88:8a:da:5b:
f3:f8:33:7b:bc:67:1c:df:d4:e6:49:31:3e:00:43:
e4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55555
55859
sbgp-ipAddrBlock: critical
IPv4:
43.245.28.0/22
103.246.96.0/22
180.200.244.0/22
IPv6:
2400:b100::/32
Signature Algorithm: sha256WithRSAEncryption
51:e0:cb:ee:ea:b8:4a:01:6e:27:0d:ca:ec:6a:cd:b8:25:ce:
d8:d4:67:3b:18:87:89:83:76:0e:05:f8:c7:95:f5:31:15:d5:
b7:2d:ba:7b:5d:cc:4c:6b:58:f0:66:f4:a7:f3:46:a2:6a:84:
52:d8:a3:a5:d3:59:e0:df:65:6c:f1:f9:a9:83:df:bf:ea:70:
17:0f:67:0a:8a:8f:2d:a6:a4:7d:5f:0c:8f:e0:b6:d4:65:a1:
ca:33:d7:f5:ef:85:64:8e:e5:52:52:f0:0b:0b:e6:cc:4c:6a:
6b:56:88:a7:d7:2e:80:e7:c5:93:30:5c:5e:7b:15:f6:78:a6:
7a:a8:f9:5a:82:a2:b5:71:95:3d:a1:c1:94:38:d3:88:50:91:
ca:e2:19:d2:42:7e:51:dc:0a:d5:a6:10:a3:4b:e4:f5:82:6f:
72:57:67:d0:7f:18:a4:fa:a7:80:10:ab:01:21:9b:a0:25:38:
a9:91:1c:4c:cb:2a:72:05:ab:9f:73:be:3e:65:0c:f5:dd:4e:
e3:64:28:a6:7a:a9:55:4f:d6:ea:11:65:e1:24:06:7f:af:55:
49:32:e7:08:f2:e5:de:2c:a1:6e:1e:49:80:40:a9:dd:d2:89:
73:8e:25:b4:6d:98:75:4b:eb:a6:52:20:f0:de:ae:48:9d:7b:
66:a8:42:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:30:20 2025 by rpki-client