Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer
File: mFpmWpz7T1ygDsqL_rgGML9PSBY.cer (raw, json)
Hash identifier: Kw1FqmZpOBd3RoKE/NM8zHJLe4KKywWUR8jNF6s1o8w=
Subject key identifier: 98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02393E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 24 Mar 2025 14:34:04 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 17645
AS: 45794
AS: 55332
IP: 58.65.0.0/19
IP: 116.51.0.0/16
IP: 175.28.8.0/22
IP: 202.136.160.0/19
IP: 2402:2c00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145726 (0x2393e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 24 14:34:04 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91E6D5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:e3:7b:94:0e:be:7f:f9:24:d7:95:3a:3a:f5:
2c:68:af:34:e2:aa:c5:93:4f:5c:31:79:49:db:31:
4d:91:0a:58:1f:af:2b:40:2e:e9:4f:2d:6c:5b:e1:
b0:20:a9:39:23:e2:1c:98:11:dc:6b:76:dc:37:bb:
4d:96:67:97:90:63:65:a6:dd:87:34:09:81:c8:87:
f3:60:81:3c:f0:84:7f:a6:67:4c:3c:72:a2:aa:dd:
e1:2e:d2:cc:ce:54:4f:94:3e:cb:26:4a:ec:a8:31:
71:4e:b4:97:20:bf:02:cb:af:6a:70:1d:4d:28:ab:
d8:91:8b:3a:9f:6e:2c:14:7f:8c:00:64:00:55:31:
2c:35:34:42:0d:d3:d6:4d:b6:ce:c6:b0:15:51:ff:
3c:4c:13:af:a5:63:d2:91:1a:05:06:67:e6:93:08:
bc:df:07:f5:f5:18:d5:31:3c:37:6e:42:c5:ad:32:
34:0b:6c:fc:66:8e:c6:40:19:ba:f5:00:33:76:04:
bb:d6:db:31:31:62:49:88:73:d1:46:ad:75:bd:5d:
70:cc:fb:ad:e4:fb:8e:df:b3:ab:5d:28:07:04:19:
88:fc:58:40:6d:29:6c:17:73:78:67:7b:dc:98:61:
40:89:24:7e:35:15:0a:64:f2:c7:a4:46:07:3a:6e:
a5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17645
45794
55332
sbgp-ipAddrBlock: critical
IPv4:
58.65.0.0/19
116.51.0.0/16
175.28.8.0/22
202.136.160.0/19
IPv6:
2402:2c00::/32
Signature Algorithm: sha256WithRSAEncryption
d7:b7:be:e7:17:35:ac:1f:2e:a5:84:8a:81:68:a8:a6:6f:3a:
f5:2c:1d:59:f3:9e:be:c0:35:98:40:49:90:e3:55:8a:87:78:
86:7a:82:5c:8f:97:bf:76:27:e2:c9:f6:47:52:ba:07:7e:c6:
d8:34:13:c7:fb:a0:1c:99:74:88:17:24:6f:a8:2d:38:60:2a:
33:bf:97:8d:20:8c:f4:60:66:b9:b8:d2:da:e4:56:92:26:44:
09:07:20:de:71:b1:1d:91:5d:29:c0:13:5e:95:96:f0:30:b6:
0f:ba:3e:24:68:8b:47:6f:8b:27:73:d1:78:ef:0b:09:ce:40:
23:b0:70:59:55:22:07:57:36:db:99:bd:a4:6d:86:15:f4:9c:
8c:25:42:d2:71:e8:56:d6:04:6f:05:2b:d4:bd:7f:49:89:8d:
00:13:02:02:1a:e3:18:3b:f7:ec:66:15:19:83:3d:c4:24:81:
48:77:1c:d6:b6:4e:a8:82:a9:ec:bd:23:1f:8e:34:ab:8d:10:
7c:e1:d8:33:95:18:1e:d3:f1:89:b4:e5:b7:84:42:03:51:d7:
e3:0b:f7:47:3c:2f:c0:85:a2:c7:9d:8e:04:60:5c:6a:ae:9e:
6d:27:df:36:50:31:7d:60:f7:7a:ed:24:22:f9:d0:a0:70:97:
64:42:73:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:37:22 2025 by rpki-client