Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer
File: Ed9s5Nq5aE7fbPXgPf3shvFc174.cer (raw, json)
Hash identifier: txzWTycqvlGQwmZd3rJ9MmpTwcwbkwN9GN96aW+GSUE=
Subject key identifier: 11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0247D0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 21 May 2025 16:13:34 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 63979
IP: 27.111.12.0/24
IP: 27.111.15.0/24
IP: 103.60.99.0/24
IP: 163.47.231.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Jun 2025 07:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149456 (0x247d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 21 16:13:34 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A9165DEE, serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ee:7a:e2:2f:cd:29:59:58:dd:a5:54:74:42:
86:f8:9d:5e:9d:1a:7f:ca:dc:72:fc:ed:d4:67:e2:
ac:45:bc:06:2e:dc:9f:2e:03:cd:8c:fa:30:ae:bc:
75:6b:45:4a:04:04:06:48:6d:03:8a:f6:07:de:5c:
0c:83:ae:b2:05:ce:ea:cc:37:bf:63:a3:69:95:93:
93:32:b7:b9:39:a8:24:46:e4:2d:94:61:02:61:8d:
a5:4d:fd:96:24:83:8d:d3:b1:20:54:ce:5e:1f:d4:
57:ef:49:8e:43:12:1d:d3:02:98:81:25:dd:39:3b:
f0:b2:a3:ab:8e:13:72:42:5f:a9:ed:2b:65:50:87:
ae:da:7b:b5:3f:8f:aa:13:a0:a5:6c:df:93:76:1b:
6f:19:b6:ab:bd:0b:f0:3e:84:27:2b:38:49:42:c2:
63:63:e6:3e:84:54:f0:40:8d:f6:2a:c5:02:c4:f0:
fc:90:0b:84:1a:6c:b6:27:b7:05:de:e1:fe:be:12:
c0:83:22:9e:70:de:60:5e:e0:4b:ec:27:a2:49:c0:
2a:69:3c:e6:83:6f:ac:9a:d6:3c:9f:65:a3:54:09:
bb:05:e3:54:53:d2:37:70:db:d8:d6:9d:95:1f:8d:
45:cd:0f:85:06:69:81:65:53:77:de:48:dc:e2:cc:
d7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63979
sbgp-ipAddrBlock: critical
IPv4:
27.111.12.0/24
27.111.15.0/24
103.60.99.0/24
163.47.231.0/24
Signature Algorithm: sha256WithRSAEncryption
83:5d:69:fb:d5:56:01:45:a4:98:09:19:81:61:9c:66:da:53:
02:a1:73:0f:13:cb:4f:6d:d4:d2:9f:3a:b5:a4:11:3f:2d:67:
e7:30:04:9e:76:70:b1:10:63:8c:e2:bd:f7:de:5a:86:c0:aa:
50:ca:6a:32:1b:96:d3:df:7b:8a:7b:a0:a3:5a:d1:62:76:6f:
bf:d5:bb:aa:e2:f9:c1:50:7b:b0:66:b5:4b:8c:6d:88:0e:90:
4a:7d:17:3b:4f:52:9b:5a:c0:c6:5e:20:5f:58:32:68:a1:7e:
50:59:41:1f:8c:28:7e:c1:fd:91:58:5b:0e:27:f1:15:b5:63:
25:ed:57:cf:44:60:96:0a:9b:c1:6e:ed:41:eb:34:28:ba:27:
5a:c4:a4:32:5b:1b:5a:54:e0:c9:59:0d:24:c6:dd:50:69:3b:
fd:a8:cc:c4:0d:35:b1:ec:11:ac:f1:2c:34:5c:5b:a3:a1:e1:
29:e1:48:43:33:ee:c8:18:ea:19:ce:e6:07:97:9f:c9:a2:49:
ea:7e:2b:21:61:5f:69:fa:67:ff:f2:12:3d:68:80:a1:a8:5f:
df:05:81:83:fa:cc:81:e7:c6:b7:25:bc:24:99:4f:97:f7:86:
22:b3:32:81:f7:a2:f0:d9:03:e7:7a:c5:3a:f7:4a:f9:58:ea:
85:b5:00:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 30 09:15:36 2025 by rpki-client