Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer
File: GkUkezobAmknHXRsWl-sAUX_MyI.cer (raw, json)
Hash identifier: bNiw8x6ROAoTiaIrrVR4RR1RFK4uLuIquYrkphpongc=
Subject key identifier: 1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0242F1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 May 2025 12:33:32 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 152680
IP: 117.103.112.0/23
IP: 2001:df3:a540::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Jun 2025 07:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148209 (0x242f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 1 12:33:32 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A911A2B1, serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6b:c3:ff:e0:2f:76:c2:7a:a7:53:d6:be:3a:
fb:c6:d0:1c:1c:d4:a4:32:78:49:b4:94:85:3c:fe:
b9:aa:58:32:45:b6:f0:f7:47:3f:bb:40:80:6d:47:
b7:42:91:5d:69:14:1d:f1:4a:e5:db:8e:aa:1f:8d:
18:bb:9e:08:f7:b8:c0:cb:ab:69:19:a0:bd:1c:6e:
32:b2:28:ef:d1:e1:a3:36:cc:28:cd:39:22:fc:bb:
40:d0:ce:f3:17:7a:39:8a:f7:be:2f:c4:55:68:9e:
16:46:63:58:eb:e1:3d:0f:b5:e1:39:3a:52:8d:56:
5f:c3:7b:44:52:64:29:f9:a4:97:3e:e3:ef:ed:e5:
db:2f:c3:48:d4:54:0f:ad:74:00:d0:11:8a:95:ea:
6e:44:d4:24:63:68:64:20:e0:7c:e5:e3:97:1a:7e:
2e:33:7e:c5:3c:bd:40:c3:5f:c4:d9:2e:70:87:bc:
e1:91:4d:60:80:93:d1:a2:a5:03:27:bc:8e:00:6e:
c7:31:fd:0d:79:bc:9b:13:f1:c7:c4:3c:1f:58:e7:
ad:6a:68:70:53:7e:bd:bd:de:11:79:73:b4:48:00:
df:9d:6c:30:64:a1:f3:c8:24:0e:3b:e1:04:86:a0:
c3:4c:18:8c:81:1f:ec:09:ae:80:39:b7:35:fb:ee:
af:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152680
sbgp-ipAddrBlock: critical
IPv4:
117.103.112.0/23
IPv6:
2001:df3:a540::/48
Signature Algorithm: sha256WithRSAEncryption
03:eb:04:10:99:99:be:e6:3a:71:13:52:3d:57:76:22:a6:c8:
7f:c4:df:7d:42:7c:7c:1e:52:b4:66:a9:6b:fd:fe:a0:ea:e8:
ec:b8:00:7f:97:c1:9a:87:95:73:64:6a:e2:89:0c:63:ee:4e:
c8:f3:be:58:68:7b:d2:ee:77:a0:88:58:3c:e8:3a:49:29:e3:
6c:99:22:fd:b4:bc:45:32:e5:7c:92:8f:89:31:fd:59:27:92:
5b:4e:76:82:8a:a0:2f:80:e5:bd:97:7a:d8:5c:c7:ba:81:ab:
7d:da:7e:14:45:09:18:61:92:76:7e:27:49:29:75:f3:52:82:
21:a0:a8:4a:37:9d:d8:cb:b4:15:23:5e:de:14:0b:f8:c6:a2:
0f:85:b8:25:c0:0f:c9:01:60:32:d4:b6:6c:fd:b5:3f:16:2a:
93:fd:69:21:55:57:8b:f5:86:a3:30:e8:f3:e6:ec:eb:4f:48:
30:48:66:c4:bb:6d:0f:d8:af:69:e0:04:90:1d:4e:66:29:f7:
ac:9b:c1:c8:3e:07:cc:13:ae:4c:25:30:bc:ba:82:ec:34:d1:
4d:ac:97:df:e0:f1:6c:cb:aa:d4:54:12:6d:f3:61:b8:1b:b7:
9c:2b:b5:c6:b3:53:79:9e:96:23:82:1b:a1:7a:fd:75:7c:a0:
d3:18:37:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 30 08:59:39 2025 by rpki-client