Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
File: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer (raw, json)
Hash identifier: WH+uxGiVdX6yJCROKTcmK+qLA1KWX7+4vV/i2Vt/Ixo=
Subject key identifier: EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02462D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 14 May 2025 18:28:39 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 137823
IP: 103.115.24.0/22
IP: 2402:dbc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Jun 2025 07:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149037 (0x2462d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 14 18:28:39 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A918D7D0, serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:6a:2a:92:b4:32:15:3e:85:d0:e5:a2:c0:
2b:8d:ed:f8:c2:0f:84:48:30:4e:03:5c:2e:00:8a:
4e:13:f2:a2:12:0f:57:2e:b6:48:81:01:6b:17:b7:
be:92:e2:84:a9:c4:ac:2e:f9:63:22:79:62:09:75:
c0:3d:ce:98:54:a9:44:d6:f7:a5:c1:9a:97:ca:60:
2d:1a:1b:6c:d4:cb:02:44:b6:7e:32:a3:ca:c2:6a:
a8:6f:46:06:60:f8:02:97:a1:db:a4:a9:d5:1e:8b:
bc:41:73:c6:f8:00:47:f0:5b:c1:c3:4c:a9:df:de:
1a:3c:be:4b:f3:12:a8:43:57:9c:b3:d3:49:bb:10:
b6:c9:40:88:c6:06:8c:9b:59:5e:36:8f:4c:db:c7:
39:cd:4b:62:49:1b:a5:34:06:1b:42:06:37:78:54:
fb:9a:1c:50:6f:4d:29:1e:a9:bf:72:f7:27:75:b9:
b1:3c:62:99:a2:f6:47:ed:3b:4b:43:05:d1:d1:cd:
bd:e0:28:16:ef:59:86:24:6f:7e:1a:d1:98:75:88:
41:30:bd:1a:ff:4c:46:d7:8a:d3:47:3e:32:5c:d6:
7f:a5:e9:2d:63:cf:25:88:97:51:db:f8:01:63:0b:
40:63:b2:1b:fa:26:16:bc:4e:f4:e7:37:16:77:51:
68:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137823
sbgp-ipAddrBlock: critical
IPv4:
103.115.24.0/22
IPv6:
2402:dbc0::/32
Signature Algorithm: sha256WithRSAEncryption
17:9e:42:07:07:80:a6:b8:62:64:a9:c2:61:92:1a:9c:92:47:
d7:75:81:63:90:55:ed:9c:8a:61:f6:d4:bb:0b:54:2c:96:6d:
16:f4:0e:e4:1d:51:49:6a:ae:9f:fc:fb:44:d5:de:79:63:89:
98:c7:0d:4d:1b:5b:e3:e6:0c:be:7d:ef:ac:2c:1c:1b:1d:c6:
21:1d:98:6e:73:e8:df:1e:70:7c:99:26:e7:b0:80:6c:4b:ac:
36:8a:29:93:28:70:37:5e:6a:67:bc:f1:95:b3:85:ae:60:43:
d0:24:1b:52:80:d1:15:fb:c6:84:0d:6c:3d:cd:61:a9:4a:ec:
17:0e:73:a3:10:c1:17:94:de:8b:d5:e2:02:86:bc:ee:11:9b:
8f:ec:93:3c:d9:e3:6b:04:a9:7a:b1:ae:c0:5b:3f:d0:c6:1c:
8f:a6:12:ad:58:28:cb:4e:5a:69:8e:b6:dc:e3:24:19:87:da:
66:75:f9:b6:99:c6:72:f1:d9:53:d0:b7:0f:23:87:3b:7f:47:
2b:ba:a6:8b:ff:57:75:09:82:28:2c:65:5d:f8:9e:df:bc:6b:
a3:8a:e8:0e:ee:a3:5f:6f:a9:ab:eb:90:98:77:fe:d8:b0:cb:
74:11:ad:1e:5c:92:98:7f:cb:42:15:0f:db:02:72:a3:61:74:
b3:0b:32:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 30 08:22:15 2025 by rpki-client