Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vW8yJwkswpQOGkXy4_RJHw3c26I.cer
File: vW8yJwkswpQOGkXy4_RJHw3c26I.cer (raw, json)
Hash identifier: LD8ACa2fe4PRGiO+QRqK2pS2YMbPQ6P6NhNax+a12vE=
Subject key identifier: BD:6F:32:27:09:2C:C2:94:0E:1A:45:F2:E3:F4:49:1F:0D:DC:DB:A2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023F1F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9130D77/54B30422454011EB8861352FC4F9AE02/vW8yJwkswpQOGkXy4_RJHw3c26I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9130D77/54B30422454011EB8861352FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 15 Apr 2025 13:25:59 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 133959
IP: 103.50.14.0/23
IP: 2402:5080::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Apr 2025 18:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147231 (0x23f1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 15 13:25:59 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9130D77, serialNumber=BD6F3227092CC2940E1A45F2E3F4491F0DDCDBA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:ff:4e:a1:20:fe:19:26:8e:2c:cf:c8:69:
68:95:9f:e0:25:00:33:f9:6e:6d:1c:37:6c:3a:85:
3b:95:7f:46:ca:17:9e:6a:16:9a:dd:83:ef:5d:1f:
9c:f4:84:5b:2a:8b:b0:89:35:99:5e:75:27:7e:e8:
8a:dc:f9:8a:bd:a2:23:67:c2:7c:da:07:e4:1b:03:
4f:8c:e0:94:74:bb:6c:a2:58:df:b1:ac:f7:7b:64:
9b:ec:ef:b4:d6:96:e3:85:05:cc:75:85:a8:97:76:
3e:d2:52:2a:8b:f7:c1:b9:f6:22:e1:00:a2:8f:76:
a5:94:ff:77:65:be:24:48:ff:2e:99:89:7c:2a:d3:
a5:4d:d7:1a:6b:bf:42:88:09:89:c8:a9:2b:21:3e:
ce:d1:dc:4f:49:f7:7b:a9:e4:1f:bb:d8:ac:74:75:
bb:58:1e:2f:41:81:85:ec:f0:8c:f8:a0:90:1d:eb:
2e:25:6c:82:11:1f:4c:68:4f:b8:1c:14:9d:ad:b8:
b7:42:15:13:08:09:d5:f3:06:06:4c:5e:bb:40:f8:
04:7d:4e:ef:ad:56:50:21:12:9c:c1:e0:60:ea:48:
ed:31:03:85:e1:f0:08:5d:d8:f7:79:e3:fd:2e:83:
77:bd:ad:df:6b:45:50:48:36:88:8a:21:23:52:8e:
a4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6F:32:27:09:2C:C2:94:0E:1A:45:F2:E3:F4:49:1F:0D:DC:DB:A2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9130D77/54B30422454011EB8861352FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9130D77/54B30422454011EB8861352FC4F9AE02/vW8yJwkswpQOGkXy4_RJHw3c26I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133959
sbgp-ipAddrBlock: critical
IPv4:
103.50.14.0/23
IPv6:
2402:5080::/32
Signature Algorithm: sha256WithRSAEncryption
4e:ce:81:b7:90:1a:8c:c2:ef:dc:13:f3:b3:48:26:47:ab:d5:
fb:24:98:d8:24:42:bc:69:06:af:77:d2:54:7e:e2:a9:07:35:
ca:14:cc:f0:18:3c:f0:0d:0a:1a:33:37:76:c7:59:5f:59:76:
95:43:34:f5:38:2e:97:59:85:cb:ea:6a:8f:e0:97:80:71:f8:
59:66:29:68:ea:27:4d:aa:1a:af:28:19:68:69:ee:58:5d:29:
be:5c:7c:48:ed:28:00:82:22:d4:8a:fa:25:66:45:04:74:98:
0a:9d:75:29:58:ba:f0:3b:51:10:f1:e3:62:3a:c8:54:2e:70:
2a:33:e6:5a:25:9e:90:5f:de:bd:bf:7d:b7:90:e7:d7:9c:c9:
b6:69:05:8f:6b:92:69:fa:57:27:d5:22:fa:0b:78:28:62:58:
cb:6c:0c:ad:d2:1b:50:b5:27:a1:e2:bb:61:62:88:c5:94:42:
10:fa:61:d2:c1:f5:95:92:eb:7a:e3:9b:c1:0a:df:70:a2:e2:
6e:d0:49:db:ee:cf:ce:32:27:7a:2a:33:ff:5c:62:73:ac:27:
f5:79:fd:95:2c:c7:26:0a:7f:1c:21:fb:6e:e3:ec:d4:78:a4:
1f:c5:18:df:f6:68:a4:57:0a:e5:84:09:ee:b9:8c:61:1e:db:
72:ae:9b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:58:19 2025 by rpki-client