Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yjpaAuDUSeTxpc4aLkj11jQ2Kk.cer
File: 6yjpaAuDUSeTxpc4aLkj11jQ2Kk.cer (raw, json)
Hash identifier: Fjd7gG5AvOe8i1QrqYRQL0iFsNvnoAnioIqG3K8nZeo=
Subject key identifier: EB:28:E9:68:0B:83:51:27:93:C6:97:38:68:B9:23:D7:58:D0:D8:A9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025309
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/6/EB28E9680B83512793C6973868B923D758D0D8A9.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/6/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 03 Jul 2025 03:18:24 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 149301
IP: 2001:df3:efc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152329 (0x25309)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 3 03:18:24 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91650860000, serialNumber=EB28E9680B83512793C6973868B923D758D0D8A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:5d:d6:8f:2d:ec:ac:a3:d0:1f:12:eb:53:
37:79:1e:68:41:1d:78:a1:00:b7:89:87:42:1c:d7:
a9:a1:c6:2b:f7:15:74:2f:7d:1c:15:f2:ba:b5:bb:
94:73:3a:56:55:82:4a:18:a9:24:c0:76:0b:09:77:
4b:1d:8a:e0:1c:0d:fb:d2:4a:25:1b:2c:e6:35:a2:
a4:70:11:9f:5c:73:4a:e9:20:0b:34:33:81:77:f0:
8b:76:f6:a4:e8:43:2c:ca:c3:70:af:02:f6:f3:29:
93:6a:58:ae:d8:2a:67:d6:8b:65:fb:bc:b4:cf:13:
e8:14:5a:97:9a:01:0e:55:c8:e1:3a:83:f0:ad:cf:
fc:9e:6c:05:02:28:06:5c:44:28:64:e3:3b:23:fe:
25:dd:e0:e6:a7:c2:50:6a:56:55:e5:86:6d:a8:c9:
8e:ec:f5:42:f4:39:5c:29:35:98:2e:ea:6f:dc:ab:
0a:14:00:8c:62:56:88:b1:81:6d:86:68:55:b8:18:
57:c6:ce:ca:30:8f:b6:82:9e:cd:b3:b6:01:3b:88:
1c:5d:ee:e7:ff:41:7a:68:48:7e:87:fd:28:87:02:
fd:16:69:22:e8:5e:a0:23:75:bc:b4:bf:f2:c7:02:
0e:58:eb:98:f1:fd:bd:83:81:67:b7:7b:da:1c:ee:
d8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:28:E9:68:0B:83:51:27:93:C6:97:38:68:B9:23:D7:58:D0:D8:A9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/6/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/6/EB28E9680B83512793C6973868B923D758D0D8A9.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149301
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:efc0::/48
Signature Algorithm: sha256WithRSAEncryption
5a:18:ab:98:09:5c:7c:b6:49:cd:89:8d:65:52:80:f1:9c:82:
f2:5a:84:b2:e3:cd:1b:97:e2:e1:84:24:af:79:30:3a:97:c5:
df:6c:a9:eb:55:77:de:80:e5:98:9f:dd:30:82:17:d7:42:0c:
e6:7b:51:97:6d:c4:6d:e8:fe:49:e6:e3:69:0e:68:2b:b4:02:
b3:37:a0:4d:19:81:9b:12:64:91:49:ad:e0:84:3d:06:70:05:
c9:2f:a3:75:16:3f:ab:01:ec:f9:5b:ed:c6:3e:bd:5a:37:c7:
67:6a:23:8d:20:7e:97:cf:e5:21:2f:21:cb:48:d0:0e:34:de:
5b:3f:84:f4:53:1d:85:3d:da:9a:a8:55:69:8e:15:6e:a2:49:
d8:b5:4c:9e:31:f1:4e:24:b5:29:a5:14:c2:36:7e:23:4b:71:
63:56:a7:d1:87:fc:fb:c3:67:6d:ba:5b:33:81:63:c2:57:af:
61:42:78:8a:7f:2f:06:22:fc:34:f9:5f:ea:5d:e3:80:d6:73:
fd:52:26:3a:b5:cf:b3:74:a1:18:57:da:24:61:a8:17:6f:09:
4c:42:22:5a:7e:ff:36:db:ac:63:ba:b7:2d:65:0f:95:8b:aa:
ef:88:da:52:be:45:b4:ec:83:09:bc:9a:50:c9:27:cf:69:12:
c5:ea:73:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 11:08:10 2025 by rpki-client