Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPut8cC1pCW10h189FxAyqRO3OE.cer
File: KPut8cC1pCW10h189FxAyqRO3OE.cer (raw, json)
Hash identifier: 1ZQV6QaNZZ7f4TnoC5AGJ7Bt/AfUN9B45s32Ef8Q98E=
Subject key identifier: 28:FB:AD:F1:C0:B5:A4:25:B5:D2:1D:7C:F4:5C:40:CA:A4:4E:DC:E1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0247C3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 21 May 2025 14:00:55 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 133429
IP: 2401:31c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Jun 2025 07:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149443 (0x247c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 21 14:00:55 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A9136AF7, serialNumber=28FBADF1C0B5A425B5D21D7CF45C40CAA44EDCE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f0:75:9d:9e:4d:1a:86:85:44:17:04:11:56:
98:5d:9b:97:e0:38:e6:23:36:c1:30:e3:e4:60:57:
c3:4a:98:b9:a3:24:83:7e:5e:f0:40:3b:3a:83:ba:
f5:01:2b:d1:38:98:4c:b0:85:e0:55:4a:76:e7:70:
8b:23:42:23:9e:4e:dc:1a:b0:97:ea:e3:56:d1:1d:
7c:43:57:b0:f3:5f:60:50:be:e6:df:5d:0f:d8:d4:
6b:69:89:ac:77:e5:bc:9e:27:e0:9d:62:0a:d6:32:
04:38:84:dc:7c:db:95:cc:2a:16:d5:d4:e6:bb:02:
cb:02:fb:11:17:a0:3a:5f:3c:c4:37:9a:c8:4c:35:
8e:b0:16:88:55:74:b2:83:aa:bc:e8:0a:f6:b2:a9:
15:b1:98:c1:6a:e5:e7:1c:cd:ff:ca:b7:3f:6b:39:
c8:2a:f8:06:a8:f5:a8:cc:18:d0:22:a8:d6:f8:41:
52:74:f3:8f:c5:0c:c6:54:73:ca:bb:5a:23:e8:74:
81:34:29:a4:95:b9:bd:78:bd:01:1e:9f:cb:4c:16:
19:c6:56:cb:09:02:b9:88:57:0c:4a:4a:91:62:58:
db:2d:8e:e4:93:ba:d7:43:eb:44:1d:93:8f:6f:3f:
23:af:18:b0:34:00:e2:86:0a:a3:a9:21:97:13:ab:
bd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FB:AD:F1:C0:B5:A4:25:B5:D2:1D:7C:F4:5C:40:CA:A4:4E:DC:E1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133429
sbgp-ipAddrBlock: critical
IPv6:
2401:31c0::/32
Signature Algorithm: sha256WithRSAEncryption
1b:dc:fc:60:4d:6e:42:8e:ac:24:a3:9b:9d:3c:16:50:3c:ab:
f5:07:f7:83:62:f3:67:f1:7d:33:6b:e1:3f:7b:55:97:c6:95:
63:33:8f:c1:a7:a2:1c:34:4f:14:cc:54:3d:cd:a9:3d:b1:13:
8f:bf:32:8a:13:f3:c2:e2:12:68:6d:65:fb:23:88:fc:8e:b8:
7e:3d:05:2e:6a:8d:3d:45:bc:a3:77:48:6e:9c:77:a1:09:ad:
0f:10:62:dd:66:08:bd:2b:60:fc:18:ff:22:aa:97:6b:1b:80:
59:00:cb:92:3f:37:d6:ed:63:3d:0b:1e:e8:f1:5c:dc:df:91:
96:6a:e6:a5:b7:39:b8:59:06:1c:a2:a9:38:5c:7d:fe:a6:b5:
0e:01:4a:19:1c:fd:b5:4d:58:73:c8:61:f2:89:57:be:19:49:
a2:f1:b1:43:01:66:48:64:d8:5e:2b:ca:89:f7:eb:b6:cc:d1:
02:7c:53:52:9e:e2:c0:34:5d:4b:00:33:4e:04:ca:ef:1a:70:
26:63:2e:9a:7d:d6:90:c6:bd:a6:ba:cd:0b:30:d4:0e:10:4d:
65:1b:c5:17:df:c0:7b:8c:c5:90:e1:f5:83:83:f0:42:0d:a4:
01:c8:06:fc:ff:47:0b:db:18:e6:78:7a:34:62:50:86:54:3b:
b8:cd:b0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 30 09:35:27 2025 by rpki-client