Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer
File: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer (raw, json)
Hash identifier: Sxn8rOsj8sB05ZEdpVEm/Y1x0YGEmxoMO61UqbSHcMc=
Subject key identifier: 33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024380
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 02 May 2025 16:11:43 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 103.91.8.0/22
IP: 123.253.24.0/22
IP: 2401:c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Jun 2025 07:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148352 (0x24380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 2 16:11:43 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A9171A59, serialNumber=333EC503014D0674AF1674199410F9B091B8FB94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:7b:71:7a:8d:0d:e3:c6:8f:e8:23:10:7a:
19:c0:af:9f:e8:b2:bb:17:2f:1f:c9:7d:02:58:71:
24:4a:a6:72:ea:23:de:86:76:81:bd:46:1a:3c:45:
16:4c:4e:90:c7:04:f5:47:80:36:94:3e:75:6b:ee:
bb:6d:65:43:f9:c8:16:c2:8a:a8:f7:f5:71:d5:54:
8e:b3:33:b3:cf:40:d9:a9:9f:54:1b:b7:01:e0:d6:
0f:c9:d2:2f:ae:5a:a6:74:e5:e7:03:16:ab:2e:ff:
e5:03:42:af:45:ae:fa:c3:88:2f:60:a2:fa:9b:21:
58:69:bf:22:1c:6a:4d:b2:dd:2b:d3:b0:43:d5:38:
64:4b:5c:3b:1d:07:ac:c5:bc:0b:6f:67:dc:80:65:
71:f3:0d:63:49:20:dc:3d:44:c8:ef:bd:52:2f:49:
97:95:3b:98:43:23:9e:54:e1:ee:e0:fe:12:d8:63:
e5:58:77:85:da:d4:d9:db:f2:ee:d4:78:59:a7:a9:
c0:0a:0d:1f:6e:e3:a5:73:b1:e7:86:73:68:92:a6:
3f:8f:64:db:2f:62:cc:ee:ae:bc:0c:93:ae:33:c6:
32:da:74:bc:ef:f4:4d:5c:29:ec:93:ec:aa:47:4d:
c0:08:87:f7:dc:aa:93:a1:07:e5:29:47:52:a0:2f:
b4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.91.8.0/22
123.253.24.0/22
IPv6:
2401:c0::/32
Signature Algorithm: sha256WithRSAEncryption
55:87:5f:8f:4d:fd:f5:84:77:ef:53:f1:60:33:17:b6:79:2a:
55:12:17:1b:ec:e0:24:89:25:48:b5:58:48:10:4f:dd:20:3a:
52:0a:7c:8d:cc:d7:0b:d7:12:4d:55:d2:e0:c8:64:9e:f9:e0:
a8:76:09:9b:16:81:93:17:e3:ac:f8:48:60:5b:4c:4f:f0:4b:
3e:70:cc:03:43:74:52:a5:7b:e2:da:a5:b8:36:fb:ec:c1:20:
37:28:04:03:15:2a:35:86:24:f8:64:6f:bc:e6:29:bb:ab:cc:
56:e9:a2:9a:8d:0e:9f:cd:05:d6:12:fa:67:1b:49:81:24:42:
81:3c:f5:cd:7d:58:aa:56:35:94:92:bd:d2:f1:a3:a7:53:54:
59:25:a6:f0:83:35:57:20:55:bf:3c:77:62:ae:01:03:d3:fa:
df:03:77:8d:9a:84:ce:03:ed:8b:3e:28:74:29:47:33:1b:15:
d6:b5:06:89:3c:1a:05:ca:47:01:28:4a:66:da:f0:10:b5:f9:
ea:74:cc:cc:24:ad:87:d1:6b:09:d8:1e:7f:d0:4e:22:01:d4:
de:a9:ed:63:df:96:7d:19:c8:0c:30:c5:81:e3:29:48:81:6d:
aa:e8:fa:59:81:66:15:e6:e5:f4:5a:1e:54:b8:35:ca:8e:81:
7e:51:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 30 09:43:51 2025 by rpki-client