Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrYFvbTytu0rBR3EKy6AP7YHjk0.cer
File: wrYFvbTytu0rBR3EKy6AP7YHjk0.cer (raw, json)
Hash identifier: mokZhE0qNPkQLFKjFzqX14MWCfWubDqrkqbaejqVWYA=
Subject key identifier: C2:B6:05:BD:B4:F2:B6:ED:2B:05:1D:C4:2B:2E:80:3F:B6:07:8E:4D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023C53
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Apr 2025 14:31:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56135
AS: 133452
IP: 43.250.68.0/22
IP: 101.234.72.0/22
IP: 103.29.192.0/22
IP: 2407:be00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 19:11:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146515 (0x23c53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Apr 2 14:31:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91F692A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9c:98:ba:db:f3:af:4b:8d:3d:6b:f8:af:b2:
f7:38:c1:75:94:f7:c9:b0:4f:d0:36:04:07:f7:d6:
5b:0e:37:08:4c:7d:90:41:78:7b:09:86:cd:54:dc:
f4:51:58:a9:8c:74:ab:30:04:11:f0:af:6a:22:81:
93:59:85:fb:b2:4b:56:f1:81:fc:b9:18:37:d0:42:
be:de:7d:44:09:77:e6:5f:5c:b1:43:9f:64:8e:f6:
d8:9e:eb:c8:61:90:cc:9a:28:b0:c3:a4:f9:8f:2d:
d7:e0:6c:09:8d:36:69:aa:4d:c0:c9:51:07:69:d4:
c2:3f:39:72:d9:ba:c2:4d:bb:f9:49:da:59:fb:68:
1c:87:16:b9:db:c4:d3:ee:71:4c:8e:71:2f:c5:2d:
a2:6c:8c:7f:ce:55:14:74:df:f7:44:8c:e9:83:aa:
de:90:84:a8:04:c0:9e:cc:95:5f:d2:1a:62:57:e0:
a7:e2:2c:7d:bd:01:0f:1d:08:73:7a:f7:4c:23:36:
4d:38:5e:e0:51:20:31:fd:61:72:74:c9:30:08:a5:
93:89:3a:74:6c:6b:b5:54:27:dc:ec:35:ea:13:5c:
a4:53:de:71:e9:d7:49:18:ca:12:ba:e8:4d:01:78:
47:45:9d:82:d8:fc:ca:23:bf:28:8d:76:96:36:89:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B6:05:BD:B4:F2:B6:ED:2B:05:1D:C4:2B:2E:80:3F:B6:07:8E:4D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56135
133452
sbgp-ipAddrBlock: critical
IPv4:
43.250.68.0/22
101.234.72.0/22
103.29.192.0/22
IPv6:
2407:be00::/32
Signature Algorithm: sha256WithRSAEncryption
0c:fa:6e:03:c0:da:04:da:17:35:ce:c2:19:2c:15:78:3c:65:
bc:c5:61:39:84:42:7b:49:dc:90:6b:36:12:6b:f2:4f:5a:fb:
e2:b0:1c:41:ff:02:34:8d:84:cb:a2:42:b1:6f:5f:f9:09:5f:
87:a4:bd:12:1a:a5:b5:d1:44:05:3a:85:c4:31:80:39:32:6f:
22:6f:8b:0c:3e:fd:be:71:ba:c2:4c:00:bb:8a:87:0d:0e:38:
21:1d:f7:e8:8e:70:dc:49:3d:38:a5:7a:df:2f:cf:42:b6:54:
f1:a4:40:40:fb:d1:fb:91:51:80:a9:9e:cc:4d:61:23:07:5d:
b9:f4:4e:f9:64:a3:fe:20:af:f5:bb:d8:21:9b:6a:2c:51:43:
a9:1b:05:cb:63:15:cf:6d:b6:96:f5:91:82:d6:55:13:23:c9:
b1:7d:e0:0a:3c:2b:5c:bd:47:3b:db:d8:99:c8:63:7b:31:8b:
fe:e8:75:8f:d6:59:d9:a2:e8:50:7f:33:22:6f:7a:47:b0:23:
96:e6:d9:01:f5:44:3e:d2:d8:d2:05:87:84:79:90:5d:5f:c0:
71:d3:3d:0d:88:65:4f:25:0a:08:6b:9b:00:e2:b2:13:35:06:
03:4c:d8:8a:36:2d:76:64:7a:d2:c7:24:3e:46:7e:d4:1a:61:
24:f4:c7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:18:59 2025 by rpki-client