Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer
File: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer (raw, json)
Hash identifier: l1j/hvHx86bJ/SJVTqjkQKrBuWI34FvVTy10h/ZmngA=
Subject key identifier: F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0246F6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 17 May 2025 13:29:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 132044
IP: 163.227.42.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Jun 2025 07:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149238 (0x246f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 17 13:29:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A912EFFD, serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:d2:ff:f8:c3:0c:39:36:43:6e:7f:04:aa:
1f:6a:e6:f3:17:76:8e:c8:b2:ab:a5:51:c9:86:57:
10:0e:d9:13:11:51:3e:6c:70:be:44:53:82:1b:4d:
e6:0b:4c:c9:a5:4b:45:6c:50:d0:98:47:95:77:7c:
f5:d9:65:f2:c3:1e:ef:7b:53:c2:7b:6c:64:dd:b8:
c0:fa:77:b2:b5:69:1d:c3:e4:30:c9:e9:61:d6:64:
f4:80:3c:e1:08:43:17:69:62:55:20:26:a0:b7:75:
dc:cc:33:89:fe:e2:af:76:da:0b:4c:b4:5b:8d:dd:
8a:99:5a:14:94:c6:c9:26:b8:05:e9:dc:e8:05:3c:
9a:39:16:df:b3:08:72:0b:57:44:42:4a:b1:6f:ea:
dc:85:1e:ad:6c:17:98:6c:d8:6e:6c:41:8a:fd:ba:
5e:37:98:7b:61:88:b4:b1:ec:94:27:f8:69:04:83:
84:07:11:c3:2d:fa:61:cb:fb:ea:0d:b6:70:74:fc:
7c:73:94:7a:f1:32:d7:5c:55:d8:69:4c:24:cc:47:
fd:9e:f9:9e:70:ad:e7:d9:61:d0:52:30:de:8e:0d:
c2:a7:2e:b4:7a:47:1b:77:fe:41:24:fb:99:b0:f9:
13:50:d8:f3:47:28:01:2a:b6:ac:6a:7e:a3:fd:1c:
e6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132044
sbgp-ipAddrBlock: critical
IPv4:
163.227.42.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e7:ee:d3:f2:f8:04:10:76:99:e9:5d:30:4f:43:f6:75:f5:
a2:ce:c5:78:b4:ff:1a:95:2f:ba:0b:85:0d:b5:09:e0:a3:df:
73:f1:52:98:4d:26:59:a7:11:d5:05:80:7b:31:11:33:4f:e8:
11:58:82:e3:46:4f:6d:d4:f5:bb:d9:f4:56:2b:93:05:1d:87:
31:97:52:79:79:dc:92:af:70:5f:eb:67:49:86:44:68:89:fb:
14:6f:76:79:b4:0a:3c:06:a0:9f:e5:34:92:b9:73:51:fc:8d:
a0:2d:7d:45:68:1a:09:e9:df:ee:d5:8a:62:75:d0:48:55:d4:
98:bf:a1:57:c7:bc:f3:df:81:4e:03:6a:99:ed:a3:52:6d:9c:
2e:d5:2c:d2:9b:3e:90:d4:56:97:42:da:ec:db:9a:85:0d:83:
79:30:69:b1:a7:70:03:17:30:89:e9:fb:3a:86:c4:a3:91:98:
b1:90:22:da:61:2c:a2:9d:84:a0:b8:62:ed:fa:86:eb:07:0e:
0a:e0:08:23:4a:8c:b9:48:bc:14:96:0e:e8:61:34:be:4b:a9:
a1:0f:37:54:8f:40:c0:db:94:5b:c3:5a:13:31:a4:f2:30:c4:
77:0d:e8:77:98:53:d2:af:23:bc:44:bc:c1:4a:d5:57:f6:73:
3f:2f:34:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 30 08:25:47 2025 by rpki-client