Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer
File: mmZSAdYWDzHXa50heh3_6tEsuoI.cer (raw, json)
Hash identifier: /TlrX3MotEkf78fR2KuVwN5lTxu4z+1ifQ7arDmdviI=
Subject key identifier: 9A:66:52:01:D6:16:0F:31:D7:6B:9D:21:7A:1D:FF:EA:D1:2C:BA:82
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025411
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 07 Jul 2025 14:58:57 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 45264
IP: 103.142.19.0/24
IP: 202.90.40.0/24
IP: 202.90.192.0/24
IP: 2001:df0:243::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 12:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152593 (0x25411)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 7 14:58:57 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A915180C, serialNumber=9A665201D6160F31D76B9D217A1DFFEAD12CBA82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:93:cb:2e:f8:76:60:8a:ea:45:3f:6e:2f:
bd:59:b6:95:56:d0:3b:2e:1a:b4:a5:73:fa:b9:e0:
64:ca:69:23:d8:f4:5d:8a:b8:32:46:f1:78:34:5a:
35:87:d8:81:94:01:cb:01:d1:3c:a9:6a:e4:b5:93:
d0:58:94:ba:69:ee:c8:64:13:3a:99:db:a9:21:e1:
d8:3a:b4:3b:b2:1f:3b:69:bf:0f:e7:d4:a8:ea:32:
6c:e6:10:b4:fb:c9:6a:5d:07:44:aa:60:41:19:3a:
d4:b2:a7:05:e0:83:6f:d1:e4:d2:21:95:15:23:0f:
88:5d:a3:55:27:e7:67:9e:8b:77:66:7d:95:46:5b:
6a:ab:ec:00:bc:5e:84:e1:3d:fa:16:2a:5f:de:ba:
7f:4e:93:f2:0a:31:2e:f9:73:a9:77:11:45:a4:6f:
19:5e:f0:72:22:e6:64:50:f1:3b:be:3a:b7:92:46:
ef:07:8c:8a:5d:86:dd:2b:ad:d4:a6:dd:1f:60:65:
c1:30:86:1a:3e:17:99:b3:af:19:69:4d:e2:9c:71:
ed:05:90:30:f7:b3:94:36:d4:1c:e7:5a:6c:56:3c:
c3:cf:65:d8:a9:e0:ab:2b:b2:49:93:fc:fb:d0:fd:
af:14:10:b3:03:7e:ad:36:17:30:69:b7:c5:2a:40:
a3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:66:52:01:D6:16:0F:31:D7:6B:9D:21:7A:1D:FF:EA:D1:2C:BA:82
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45264
sbgp-ipAddrBlock: critical
IPv4:
103.142.19.0/24
202.90.40.0/24
202.90.192.0/24
IPv6:
2001:df0:243::/48
Signature Algorithm: sha256WithRSAEncryption
98:0f:ee:60:3e:69:46:3b:c2:06:5b:1f:bb:f7:5e:01:6f:ce:
4e:41:d8:3a:15:f3:56:62:8b:e4:e1:ae:de:c6:f6:48:c8:a5:
e0:88:be:12:60:21:eb:0d:9d:b6:62:5f:3e:a3:9f:f3:71:93:
8d:1c:6e:28:09:ec:5e:35:00:f4:86:ec:5c:7b:60:36:01:24:
7b:dd:bf:83:df:a2:ea:3c:9b:7c:71:ae:95:03:09:02:8b:82:
2a:c5:ef:be:bb:d5:81:7a:1f:4d:3d:70:dc:42:cf:af:4f:83:
5f:40:cd:d1:ee:c8:15:68:87:75:a6:7b:16:b4:ef:65:0b:d6:
25:89:5e:b6:6f:22:55:47:5a:ca:7a:44:35:6b:ed:92:86:66:
59:e3:74:f3:11:e7:13:10:38:71:65:0e:e5:5f:bf:67:43:5b:
55:55:db:34:9c:72:30:70:b3:60:8a:81:30:93:fb:31:64:32:
72:be:cd:37:87:2f:62:2d:f6:a9:11:59:fb:13:6a:9b:c4:e6:
3f:61:36:ce:d4:1d:39:53:6a:f2:20:51:f6:9d:2a:81:b0:71:
7c:66:ca:9a:a0:91:84:9a:22:c4:27:66:e2:76:37:ad:f9:82:
c8:c4:07:4e:3d:01:76:6e:dd:5f:c3:c2:13:cd:23:a4:ca:9e:
02:c8:c7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:12:05 2025 by rpki-client