Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
File: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer (raw, json)
Hash identifier: LcSNZ/m0fJvnVhOghVLjvmXK9wYw+vfz8BkSIOWUBz8=
Subject key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02362F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 07 Mar 2025 07:46:13 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 134382
IP: 163.61.208.0/23
IP: 2001:df5:20c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144943 (0x2362f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 7 07:46:13 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A919F026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:95:f5:4c:af:0d:1b:bb:67:e2:04:4d:74:
a9:03:0c:10:7f:1f:bd:10:ed:78:25:71:b6:97:14:
8b:c6:74:72:64:12:9c:92:6d:66:c3:51:28:86:41:
e0:c6:5e:f0:1a:55:09:2a:b2:95:fa:80:9e:0b:84:
1d:a7:dd:c4:72:9f:ec:53:e6:d2:a1:c3:67:c1:fe:
2e:d4:33:0d:fe:44:2e:8b:c5:1e:0f:20:7d:a7:04:
c3:5f:63:08:24:d3:c8:50:06:8e:a9:ca:54:7e:27:
9b:6f:ed:03:80:7b:a1:0e:04:e7:bc:f6:0d:e1:ad:
4e:b5:19:09:f9:42:c2:d3:c2:13:c4:9e:25:b6:4b:
0f:14:64:71:cb:66:e1:d1:fe:d8:99:04:06:fa:8f:
00:c6:c6:ea:c2:35:43:f8:2d:bf:f2:36:db:09:8f:
a5:2c:a3:87:98:5e:76:a9:65:2f:01:23:06:c4:06:
28:20:e5:e2:05:9d:e4:3e:9f:dc:15:e6:26:28:3a:
31:90:1c:f0:7f:87:59:f9:ae:94:22:e2:5b:6f:8d:
23:7e:54:5e:f8:16:a1:0b:c2:50:78:0d:35:2d:76:
87:a4:f8:33:63:7d:52:8c:72:06:6e:cf:66:da:bd:
9f:5d:01:8d:65:2e:86:aa:cb:5b:18:a0:f4:d2:26:
cf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134382
sbgp-ipAddrBlock: critical
IPv4:
163.61.208.0/23
IPv6:
2001:df5:20c0::/48
Signature Algorithm: sha256WithRSAEncryption
50:5f:05:cb:d5:25:22:2e:44:a3:56:fe:02:b7:1f:34:77:0d:
28:0d:3f:1f:cc:82:40:c9:92:2d:4c:b9:6a:33:d3:7e:0c:c1:
8c:ed:02:bc:aa:ef:e4:58:5d:64:26:aa:ab:5b:ca:33:67:f5:
95:9a:da:ab:5a:bb:57:e1:5d:c7:a7:f7:10:68:2a:5b:18:36:
60:f1:11:68:f9:16:e1:7c:af:6f:b7:2d:52:73:ba:2d:f4:06:
f1:64:8a:95:4d:3a:c6:30:aa:34:af:4b:d8:88:f8:00:3c:18:
3a:19:63:75:75:94:d1:bd:6a:59:90:75:da:69:58:c1:be:f9:
8c:f1:44:75:55:b5:41:d1:e9:28:22:93:0d:b5:a0:95:ac:c7:
e0:81:00:4b:42:b9:52:73:14:59:96:50:fe:7c:01:d0:7c:36:
d1:9b:0d:ec:3e:cc:73:45:0e:52:51:db:e3:62:f6:bb:be:47:
9d:38:ab:3a:b5:f8:0d:7e:fe:a1:0f:b8:be:71:30:e2:7c:20:
f9:f5:0b:32:1f:cc:a5:ba:54:c5:28:35:63:ed:92:9d:01:fa:
8a:5d:6a:82:8c:6e:7c:1e:80:6b:6f:2f:d4:f2:2f:31:bb:9b:
1a:2f:88:fa:09:29:8d:0f:ee:58:dc:42:29:5c:60:0f:20:67:
4e:97:79:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:08:10 2025 by rpki-client