Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer
File: 9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer (raw, json)
Hash identifier: 1KhZdBATQSM6T9P/Qq4yv+23L0TOXvGLXS056fqqDXE=
Subject key identifier: F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02448B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 07 May 2025 00:17:50 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 152711
IP: 103.51.62.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Jun 2025 07:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148619 (0x2448b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 7 00:17:50 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91E2F80, serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:e1:ad:15:01:e9:e7:1a:dd:72:87:6a:d9:
6e:b5:05:f2:04:91:c7:d2:fe:18:c7:94:9c:c0:3f:
26:7c:94:27:24:87:2c:2b:6b:15:9d:b8:c6:59:df:
96:c2:75:16:4c:d5:51:67:ad:f2:85:be:02:48:21:
aa:38:dc:a6:08:04:6e:cf:1e:a6:92:b6:6f:72:4a:
6b:cb:de:67:74:4d:35:59:ec:1a:10:ce:65:d5:f9:
91:c8:4c:a1:79:73:0e:1d:36:af:e4:c1:0b:1a:4c:
81:f7:e0:08:6f:bb:1a:a5:ca:9f:59:5a:53:3f:78:
f3:47:32:78:ce:53:1d:7d:b6:e8:f2:cd:dc:c6:2f:
12:3c:70:6d:0e:2c:9d:11:b0:25:34:8a:e6:da:fe:
4c:68:28:6d:8d:10:e8:fe:b1:b2:14:61:be:8f:b6:
fa:51:3d:7b:aa:4e:9a:93:58:11:27:83:80:e5:b4:
af:3f:ed:21:a0:84:c0:21:6b:d1:e2:4e:44:9a:b1:
c9:d7:13:5d:d8:f9:86:ed:8d:13:3b:e4:19:05:0a:
f7:88:c2:e2:d0:df:61:d8:57:f4:6a:be:41:01:0b:
20:15:5a:5f:5d:a6:1e:a0:fa:75:d4:38:b6:68:d0:
cb:0d:bd:38:75:1e:03:5b:b8:56:c6:c5:d7:c2:a0:
20:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152711
sbgp-ipAddrBlock: critical
IPv4:
103.51.62.0/23
Signature Algorithm: sha256WithRSAEncryption
08:67:b2:18:47:ef:ed:ed:0f:3e:82:10:a9:ba:63:20:1a:a8:
56:64:42:30:fa:9b:c6:6f:37:3f:2c:c4:9f:f2:aa:6d:4e:ba:
20:51:dd:6e:f7:a9:ec:b2:05:35:ee:e2:ea:8f:2d:fc:6b:2c:
8e:79:fc:27:aa:96:f2:3b:9b:0c:37:ae:bc:44:eb:ce:96:65:
55:95:c4:19:1b:b0:57:33:e7:7e:1c:69:71:15:c6:e5:8b:65:
28:15:0d:bf:1d:a0:e5:e9:79:d3:d3:10:97:ca:40:e3:aa:5e:
f7:ab:db:ec:13:31:32:55:5b:83:74:c8:b3:54:cb:f7:88:5c:
1f:80:5f:67:c9:39:87:a1:63:1d:25:a7:65:f5:71:64:44:76:
44:fa:44:99:1c:90:53:2e:da:87:d0:e5:be:80:98:d5:fd:b0:
84:87:61:8b:37:b2:21:6f:5e:cb:83:16:e9:05:62:f9:ba:7c:
69:d9:60:b2:6c:b8:1d:cc:44:ad:d2:72:11:f8:43:75:e1:76:
1f:44:a5:60:1c:20:11:96:a0:80:d7:6d:26:da:5f:7a:a1:f7:
7d:48:65:cb:68:0c:f0:72:1b:33:cc:43:63:8d:63:a0:ef:d5:
e1:a8:c4:1b:02:0d:95:fa:f5:93:67:d4:27:ac:1b:6e:1c:a0:
97:39:cb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 30 09:47:38 2025 by rpki-client