
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer
File: EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer (raw, json)
Hash identifier: dz2PAN/K9S9lBD4G0+PmihMKcESXyiH/m8oyIGQ1tAo=
Subject key identifier: 10:44:02:9F:F8:31:74:C6:F1:D6:6C:8A:D0:D3:FA:16:64:EF:E5:3B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0246D3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 16 May 2025 19:12:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 203.12.31.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Jun 2025 07:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149203 (0x246d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 16 19:12:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A918DFCE, serialNumber=1044029FF83174C6F1D66C8AD0D3FA1664EFE53B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:44:49:0d:78:45:48:4e:9d:b8:c4:b1:db:20:
60:44:89:80:90:28:7d:fc:9c:39:7e:ce:99:0e:e0:
1f:59:7c:96:df:7d:20:48:41:48:8e:c5:16:43:ae:
7e:1d:c3:90:87:ed:45:a5:e5:ef:cc:78:ff:eb:82:
47:52:0d:25:d2:a7:9c:27:41:7e:72:85:a0:04:5a:
f0:23:73:df:da:39:3b:ab:2f:93:c0:b3:db:68:f1:
1e:8d:32:5c:96:c6:71:3a:e1:29:a7:27:ab:37:d0:
ea:b7:d1:db:7a:0f:00:b9:90:15:18:0e:ce:51:a9:
29:ba:71:6d:09:67:a5:7a:b3:0a:71:40:4d:5e:08:
f3:8d:70:6a:9a:58:78:97:ef:a4:61:96:aa:6e:22:
fb:31:1c:30:ad:74:a9:5b:4e:d7:2b:82:d0:f5:09:
b7:5f:76:f0:ba:e0:55:88:c0:65:48:85:3d:1c:74:
77:02:83:9a:b0:e6:04:3c:63:a7:c2:f1:e7:ef:99:
47:82:6a:79:da:b9:23:04:d7:a9:21:f8:34:e5:82:
29:5e:fc:9c:ba:b9:aa:28:e5:19:6e:d0:7f:fd:ca:
51:94:9a:6a:ce:3e:ce:5e:ac:75:d7:8b:9e:18:e0:
ea:5f:8d:9b:df:d5:17:69:82:83:fb:89:4d:76:ac:
f4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:44:02:9F:F8:31:74:C6:F1:D6:6C:8A:D0:D3:FA:16:64:EF:E5:3B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.12.31.0/24
Signature Algorithm: sha256WithRSAEncryption
98:bc:a7:2e:12:50:73:98:ac:8b:94:b8:c8:b3:d7:94:02:d6:
b3:46:a9:eb:31:61:74:6f:68:6d:55:60:8d:65:1c:7f:f6:d8:
fd:0c:c9:2d:50:26:62:62:7c:27:18:9b:ad:dc:95:b7:a6:9b:
aa:61:d6:a3:1a:64:3a:af:ca:bc:fd:e3:61:ee:91:9d:84:f0:
ea:c3:13:25:5e:81:e3:d3:17:1b:46:5a:df:d7:68:ca:c5:1d:
18:70:42:45:52:3d:9e:32:8e:a3:61:3b:7f:8e:a1:e7:e4:65:
97:a0:8c:a8:4d:8e:2e:7f:55:cf:4e:bd:d3:c9:91:f0:f4:5e:
f1:df:2a:1c:45:40:f3:16:9e:82:59:0e:a2:3d:15:29:c9:08:
4c:b3:11:35:37:a4:ed:5e:25:0c:c7:29:69:11:84:10:d9:fa:
46:f9:9d:36:51:03:08:58:2f:4d:62:82:2f:83:ce:8d:c5:a2:
d8:b3:e2:d7:12:ba:b0:1f:08:6e:52:8d:0e:8c:13:e3:e5:f1:
08:13:4e:9f:75:5c:7e:c9:74:e9:b9:f6:fc:8f:3c:9a:26:4d:
30:fa:ae:e2:12:63:31:6a:a3:d9:77:1e:7c:cc:ec:8a:fd:20:
7a:47:92:21:6a:05:0b:cf:d6:87:95:02:43:87:31:57:7f:52:
81:63:88:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 30 09:13:45 2025 by rpki-client