Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer
File: NDVM_NoimFFhtetii1ST_dLpbDs.cer (raw, json)
Hash identifier: AKbO0b/CCUSVvu9pIpkeV/ORdv83WLV3r/oJwPFCvao=
Subject key identifier: 34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025BC9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 07 Aug 2025 02:25:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 39.192.0.0/10
IP: 43.255.196.0/22
IP: 103.239.188.0/22
IP: 2400:82e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 11:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154569 (0x25bc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 7 02:25:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A915CB36, serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:91:ec:96:9f:86:21:b9:dc:21:73:9f:c7:
51:f6:b4:39:29:5d:53:aa:ca:ad:67:f6:14:eb:39:
00:74:b8:38:7c:c1:03:c4:6f:27:8d:81:8a:55:1f:
4f:66:69:2a:e6:b1:97:ba:12:bc:9c:24:a2:fe:3a:
38:13:da:c5:66:8b:fb:f3:2d:b0:8c:fb:cf:27:c8:
df:a3:e9:db:8e:d5:2b:68:c8:9d:28:14:f6:4d:90:
b3:18:fd:22:16:71:c0:28:b5:4b:07:94:78:f9:02:
43:77:0f:0b:6c:9b:3e:16:3b:49:35:90:da:70:a0:
d4:1d:f3:70:9e:6c:f2:fc:c1:28:e6:51:8c:07:73:
09:2c:b5:a3:94:ed:25:e3:96:40:ad:80:30:08:99:
39:02:3b:3b:a8:eb:48:5c:a4:3b:76:b2:ea:17:ae:
c3:1f:bb:85:5c:cc:7b:fa:c9:e1:a3:d0:c7:ee:bd:
7d:ec:60:fb:b1:89:ba:56:0b:02:2c:20:67:ae:db:
cd:a5:64:d0:6a:49:0e:02:7a:60:26:02:33:b1:ee:
a7:50:48:3c:39:7e:d0:0a:a6:d6:e1:6b:db:0a:f8:
09:48:0c:d0:61:b2:cc:2c:14:41:15:3c:1e:96:53:
93:6c:32:d2:8f:f8:c1:f1:22:4e:a1:78:6c:ee:de:
4f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
39.192.0.0/10
43.255.196.0/22
103.239.188.0/22
IPv6:
2400:82e0::/32
Signature Algorithm: sha256WithRSAEncryption
7c:96:f3:ee:ee:6f:90:e5:d8:91:5e:94:d5:f1:4a:07:06:f0:
64:d7:83:df:12:b6:d7:72:5c:eb:9d:8b:d1:37:95:58:d8:af:
8d:c4:51:9f:d6:89:a1:95:76:53:b3:e4:56:0e:67:b9:9c:9d:
03:49:6f:bb:33:3c:e5:cd:25:b5:88:34:1e:1d:18:b2:ec:0b:
dc:29:cb:cc:a2:37:6a:08:c4:ad:cc:0e:e1:13:92:c5:18:e0:
76:37:1a:fc:d0:66:20:5e:15:ab:4b:9b:f2:de:5e:d0:25:43:
3a:35:de:0a:a8:17:0b:9f:08:5f:ef:38:6e:53:b5:94:9c:9a:
c6:11:92:fb:bc:32:bc:af:53:e2:cf:18:fb:07:f9:db:3a:b5:
06:8f:33:10:df:bb:eb:98:aa:de:ca:f7:21:6c:8c:f2:08:b2:
cc:04:b8:09:5e:d4:78:f6:e8:ed:3f:fd:f0:01:7b:c0:1e:85:
38:78:34:7c:44:1e:dc:27:e3:e0:ae:70:ec:25:10:ba:37:1f:
19:c2:9c:13:1f:65:39:e7:9c:fb:51:54:df:b0:5c:4f:21:00:
11:8f:d4:25:f7:47:7a:dc:3d:3f:9c:65:8f:26:75:1a:70:a7:
64:51:4a:96:d7:17:db:fe:12:f5:16:d6:e6:de:d4:48:fe:79:
2c:0a:37:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 14:18:53 2025 by rpki-client