Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer
File: SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer (raw, json)
Hash identifier: VNIcxRk0l+FapvplvgIpnKacxHkxMhta0B9bDAi3DQ0=
Subject key identifier: 4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02468A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 15 May 2025 21:18:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 103.213.108.0/22
IP: 192.140.144.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Jun 2025 07:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149130 (0x2468a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 15 21:18:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91BE8F6, serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:dd:99:60:c0:78:10:d4:f8:5a:2b:5b:e3:
f1:6a:76:b4:32:42:64:2a:05:96:3a:76:68:5e:6f:
e3:73:22:46:c5:9e:45:a5:c9:7f:ad:31:f0:e1:f1:
19:18:af:1a:be:c2:79:2f:0b:8e:15:d8:bc:f5:14:
77:b7:07:0a:67:cf:07:80:99:f0:66:25:f8:81:f3:
32:19:7e:19:73:3e:35:75:63:21:85:9d:c0:5e:b1:
b2:22:26:ee:bd:62:e6:1d:f8:03:7d:46:26:d2:6e:
f0:c8:c9:8d:bb:f4:9d:7a:5d:24:76:91:be:4d:0f:
34:70:e5:93:e0:89:92:e0:46:cc:60:16:d2:92:ad:
e0:8b:4c:5c:8a:eb:7f:2f:7a:d5:6b:ec:30:a1:cb:
e8:d2:f3:3a:c8:0b:c1:e5:7b:f8:a0:11:92:76:03:
be:bd:02:2d:e4:b8:06:52:2b:b6:9f:1f:7d:43:49:
4a:f3:3f:b6:b3:7c:5c:f5:45:a5:6b:c8:14:03:48:
f7:60:84:97:e4:c8:4f:44:25:b2:15:23:3b:0f:d2:
e8:bf:bb:78:8b:36:e1:35:b8:4e:64:ce:9e:fd:87:
70:53:6b:42:66:0e:a7:91:4b:fd:64:26:a8:5a:3c:
af:af:b5:fa:90:89:3b:b8:81:0d:ac:f9:44:ae:73:
5d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.213.108.0/22
192.140.144.0/22
Signature Algorithm: sha256WithRSAEncryption
05:38:d3:7d:b0:ae:c8:54:d8:b1:b6:60:19:5f:6b:1f:35:3c:
32:da:d6:7c:4b:8a:23:91:b4:64:0c:44:52:36:4e:94:6e:33:
ec:12:ff:7a:4a:9b:4c:0c:2e:6e:2a:31:0e:3a:cb:5a:b6:67:
21:01:7d:e9:5d:13:26:5b:06:3b:8e:21:2e:3e:91:53:fe:b2:
67:44:91:27:94:21:d3:60:80:04:47:11:70:60:99:1a:fe:ab:
a6:59:d1:bf:74:4e:f5:53:1d:70:8d:ca:80:33:f2:6f:93:68:
d0:eb:6e:38:54:bd:99:17:e7:54:89:95:8b:02:bb:c0:52:9c:
5a:01:86:21:19:0e:62:ce:63:16:16:dc:d2:cb:88:52:c9:6f:
13:d3:b3:4f:6f:12:cc:dc:f4:d1:bc:e4:d0:98:b2:70:51:f0:
a2:a9:28:0c:6a:1d:a5:49:ee:6e:f0:37:da:87:81:fd:db:c5:
40:11:57:60:c9:9a:e5:b1:32:6e:90:9d:af:e6:a9:bb:7a:9a:
95:54:50:a7:5d:d3:4d:2c:c3:c0:7b:6d:45:e0:88:3b:f9:71:
4b:6d:2a:e1:41:53:ec:24:eb:8e:97:c5:99:02:ae:28:f5:ac:
20:53:3e:81:56:74:c6:ac:7b:c2:10:c8:4a:dd:25:e4:5c:41:
75:42:1e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 30 09:07:07 2025 by rpki-client