Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer
File: 1BN478zNyo5lN-lfJ6o7NTdYCvM.cer (raw, json)
Hash identifier: dIbz5BSEcP8o/Nim9mQFvnSAzOi9kK7rxEVKc4IbvdI=
Subject key identifier: D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02447B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 06 May 2025 21:16:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2404:6800::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Jun 2025 07:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148603 (0x2447b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 6 21:16:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91F2E76, serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:fd:89:79:bc:97:6b:23:01:7a:cc:6f:b3:
d8:43:c3:ac:59:f2:91:54:e3:e1:89:68:c5:9b:36:
87:c9:03:8d:ed:76:ec:0c:6a:d1:35:fe:25:ad:17:
bb:e2:dd:f6:af:00:73:48:7c:d7:ba:f5:bf:4a:7d:
5b:23:ed:f6:16:ea:2d:ff:c6:16:52:6d:bd:57:aa:
d8:53:d5:dd:02:4a:c0:07:dd:f3:6d:82:d1:23:c8:
47:d8:ab:4c:58:11:4e:8f:ef:51:e5:00:24:7b:1f:
8d:f7:1b:dc:1e:61:32:bf:66:78:4f:d4:2f:df:ed:
c5:44:f1:8d:2d:b8:b5:ca:c6:58:bc:ce:47:e0:84:
60:f2:5c:25:67:54:8c:bf:38:86:ba:36:7e:d7:77:
09:ab:2a:9c:46:a0:6c:dd:8a:7b:2b:15:b1:cf:27:
7b:a9:a0:43:4f:84:02:73:6a:76:d8:19:c5:12:68:
bb:6a:d8:c7:b9:b4:ce:2d:da:af:55:aa:a4:19:a8:
90:21:52:15:a3:a3:ab:1e:9c:3e:00:0e:49:95:ab:
92:c6:a3:4f:b0:97:d8:c1:d1:0a:78:a0:80:3b:6e:
2d:d3:29:36:39:07:e8:27:2c:0a:93:39:8f:28:10:
71:05:a6:5b:01:4f:a3:4a:1f:23:c3:1f:12:0b:df:
15:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:6800::/32
Signature Algorithm: sha256WithRSAEncryption
c5:9b:6d:6b:dc:7f:6e:72:55:9d:e2:c4:94:ae:96:42:42:c3:
39:5d:75:38:c3:f1:0c:08:ba:b8:a9:ef:66:40:2d:2f:72:ca:
b8:fe:50:d0:f2:db:16:4a:99:d8:e8:03:b1:87:75:a0:34:60:
4d:43:9b:e7:39:68:1e:a5:da:a5:a3:55:69:3e:56:a2:81:68:
4d:df:5d:0f:03:b8:e3:86:15:48:ba:d8:76:57:e8:80:ec:22:
d9:ac:39:f5:b5:87:fe:86:08:9f:63:e3:b8:e7:b2:72:d4:30:
f6:83:74:be:6f:1a:98:b3:43:fc:3a:96:6c:db:81:bf:c7:9a:
b5:33:f5:4e:2f:2b:71:66:1d:2a:61:2f:8b:e8:23:5c:2c:88:
04:70:5f:32:0f:6f:ff:0b:90:d3:6d:c3:80:3d:f4:07:51:f4:
45:3e:75:e0:37:bc:1f:35:d8:cb:8a:e5:43:71:b2:ce:02:ce:
eb:a6:05:b1:e0:3b:e9:c2:1c:5c:a1:12:da:ea:31:e4:83:53:
31:87:b4:1a:f7:00:c1:88:fb:83:6f:7d:db:ed:47:24:ab:24:
50:16:cd:18:b9:5f:77:74:2f:cc:12:4b:b0:7b:c1:25:ff:a3:
41:f9:2b:87:c4:2b:88:f8:34:f7:c2:e1:51:8d:8e:33:7f:b3:
25:f0:4b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 30 09:41:08 2025 by rpki-client