Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
File: Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer (raw, json)
Hash identifier: JlvXNsPKsu8zdbp78d6J5rEjQ8tbZTEcpcK3q8aCcx4=
Subject key identifier: 49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024784
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 20 May 2025 15:43:15 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 17497
AS: 153671
IP: 45.253.244.0/23
IP: 103.211.228.0/23
IP: 163.227.196.0/23
IP: 2402:620::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Jun 2025 07:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149380 (0x24784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 20 15:43:15 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91FDE13, serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:40:8b:4e:e8:c2:15:8c:a2:5d:0e:85:d1:79:
d1:06:97:6e:95:c7:03:dc:b4:1a:09:fe:88:ad:b3:
66:88:67:de:a7:12:ee:27:fd:33:a2:db:62:bc:c4:
c4:95:79:b2:c0:e2:2c:c9:51:4a:e0:ae:0a:8e:b6:
fd:76:65:c7:fa:fe:5f:14:4b:83:bf:60:d5:8e:43:
b3:4a:82:68:c2:c6:ef:17:72:de:aa:e8:25:09:d4:
2f:56:76:15:18:d1:ae:8c:12:3c:63:bc:f1:e3:ed:
33:46:a4:d4:fd:32:0c:f1:20:3c:f0:54:2e:ce:24:
03:b9:bd:92:d9:cf:f2:a4:f7:53:a8:7d:b3:e3:40:
07:0e:82:1c:cc:42:01:d3:47:13:46:ec:63:ac:fb:
22:a9:9e:16:13:65:fa:74:13:09:80:c5:3c:6b:04:
2e:6a:46:58:7f:ba:96:99:2c:39:0b:2d:33:84:22:
37:29:3f:08:75:fb:42:56:94:fc:ab:3d:01:f6:10:
9a:72:b6:f4:8c:2f:4f:fa:c0:0d:cb:3b:30:53:eb:
3a:7f:23:3b:ed:fc:b2:17:77:56:41:27:2c:81:07:
f7:f6:e1:70:4c:20:2f:1b:06:d9:02:db:b8:73:74:
32:3b:21:52:94:c9:4e:56:52:83:4f:f3:39:e4:56:
29:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17497
153671
sbgp-ipAddrBlock: critical
IPv4:
45.253.244.0/23
103.211.228.0/23
163.227.196.0/23
IPv6:
2402:620::/32
Signature Algorithm: sha256WithRSAEncryption
c0:cd:d1:31:fb:f7:f8:2b:d2:a8:1f:10:c2:41:f7:4e:d7:3a:
6f:e4:f7:4d:52:29:11:9a:e5:22:40:8b:46:71:5e:7b:04:c5:
89:27:9d:9b:db:da:bb:ca:b9:a2:53:58:38:eb:f2:a7:b4:7e:
57:14:c6:43:55:1d:9e:7a:27:f5:4d:fe:3a:00:1a:4e:7b:ab:
84:50:78:0f:56:50:ea:82:b5:54:af:aa:11:0d:d9:01:8e:b4:
b1:d6:f6:87:92:03:66:58:4e:d7:df:95:7b:20:c7:bb:9a:42:
e9:b3:d9:33:75:27:81:0a:0a:42:19:97:2e:e5:29:91:22:f1:
7f:9b:ad:2a:e5:81:17:52:a9:64:6a:ec:a3:6f:22:b2:e8:19:
86:27:72:0d:8f:b0:0d:11:44:5b:2c:da:bf:80:0f:1d:d2:a5:
3a:20:8d:df:ea:f9:e8:5a:4e:01:82:d8:19:4d:88:b5:35:55:
44:d2:73:93:a8:f4:b5:44:9b:62:ad:49:65:49:00:0e:97:9d:
1b:05:f1:ec:32:85:8f:7f:ad:fe:20:8a:45:53:3d:e9:d0:57:
02:ef:85:d5:fc:c9:4d:76:10:1f:0c:06:e6:f7:50:f0:2d:9e:
46:be:89:a2:9e:28:7c:52:4f:18:8e:73:0f:15:c7:69:bb:a1:
e9:89:c8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 30 08:34:44 2025 by rpki-client