Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
File: JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer (raw, json)
Hash identifier: ZxSdPatl5a8zzTBT811+EvnpUo7q9AjK/x94guQ1g1A=
Subject key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02499A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 29 May 2025 17:38:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 137532
IP: 103.112.64.0/23
IP: 2405:e6c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Jun 2025 21:09:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149914 (0x2499a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 29 17:38:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:50:24:c4:da:58:5c:37:56:97:60:b6:98:
bf:05:06:ea:e7:a7:59:e6:4e:47:a4:6f:60:1b:ef:
d2:32:bf:75:67:ba:7f:04:e1:0f:c8:58:59:73:3b:
c6:c4:0f:ed:36:9a:44:03:d4:03:5e:d5:2f:6c:09:
76:d4:86:83:e4:2a:37:89:f8:50:d0:53:01:61:d8:
81:67:16:f2:64:7f:ad:cd:aa:4d:2c:0c:24:98:ba:
25:65:b9:60:f4:fe:c9:0d:3e:2d:fd:ca:9a:97:49:
f4:42:a9:26:3e:ca:69:25:f2:17:2e:d4:ef:49:63:
33:e3:58:54:40:67:30:14:c6:7a:84:f8:2a:7e:ac:
71:d7:05:8a:4b:49:bb:04:5a:5e:84:fb:b1:8a:40:
f4:bc:00:a3:eb:f2:be:01:5d:ce:8b:ca:f8:7b:05:
3c:b6:63:d9:2d:7a:7e:44:3e:e0:17:5f:ff:6c:d0:
97:af:ed:e6:7b:05:f2:0d:35:91:ef:de:84:94:84:
ea:1d:c5:a6:06:9f:44:cd:0b:d3:b1:94:2f:2a:59:
1f:78:0f:64:fa:e7:6a:33:3c:8f:88:ad:1c:02:a0:
cb:72:78:4f:d6:59:d6:ee:02:b2:d5:1c:82:87:66:
f1:2d:c6:81:0e:f3:1f:01:2f:fe:c9:28:91:5e:ba:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137532
sbgp-ipAddrBlock: critical
IPv4:
103.112.64.0/23
IPv6:
2405:e6c0::/32
Signature Algorithm: sha256WithRSAEncryption
4d:b4:80:d1:1c:0f:98:db:b7:44:4f:9c:55:5b:d6:62:d0:f9:
bc:15:be:6d:e6:64:ec:d4:b7:04:69:5d:bf:74:61:16:f5:f6:
d1:10:89:08:da:91:4c:13:08:93:d7:de:6f:dc:55:af:9b:6b:
7b:5b:ee:22:08:5e:13:ee:03:62:f0:96:93:34:99:58:d6:0a:
54:a9:dd:7a:0d:99:55:40:b7:8e:ed:98:16:51:1b:ee:1a:91:
6f:b2:6a:9b:d9:61:00:4b:18:77:cc:b5:1e:73:7e:20:b1:89:
db:e6:a9:2a:1f:16:c8:79:3a:48:b2:98:91:9f:91:e3:97:39:
8d:04:e4:59:1e:15:9f:12:d0:17:64:6a:90:75:2c:e4:6e:06:
31:34:99:dd:9f:e2:98:9b:87:56:8a:4e:a1:f1:7f:d6:6c:a8:
97:31:9b:ab:0c:00:b3:78:a5:d0:52:53:57:a9:2c:88:ed:26:
f0:92:cb:76:60:11:bd:b6:e9:6c:26:84:90:05:ef:5d:10:f9:
77:6d:c2:95:c8:48:17:f3:a7:ce:51:9c:3a:a7:3d:ec:34:7c:
02:ab:92:a8:0e:4e:5e:b1:6a:8b:90:5f:fb:8e:cb:60:df:8d:
65:50:c3:be:ab:b0:97:8f:8b:8b:67:b6:61:bc:da:13:2b:ab:
7f:3e:b5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:00:27 2025 by rpki-client