Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer (raw, json)
Hash identifier: gOeuBpEDcof/HDbCeqMF8XfnpYgly5f7Tn8SufyMT6s=
Subject key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0248BE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 26 May 2025 18:47:28 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 103.90.172.0/24
IP: 103.97.175.0/24
IP: 103.97.200.0/23
IP: 123.253.224.0/22
IP: 2001:df0:e100::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Jun 2025 07:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149694 (0x248be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 26 18:47:28 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:39:3c:e9:87:8e:b3:5c:dd:e8:bc:4e:76:d4:
10:07:c4:e2:99:4f:73:35:d6:0b:2f:06:38:ac:2b:
88:89:e7:a4:bb:82:43:60:19:44:6f:a1:8c:78:df:
3a:53:36:32:e0:da:09:16:c4:fe:1a:37:f3:d8:76:
d9:e5:50:c4:5c:84:f1:58:63:aa:32:ad:22:ef:da:
5b:94:79:ce:a8:ef:9d:fa:ee:cb:d6:4a:d1:2b:d0:
c7:de:43:09:34:a8:7f:8c:c6:20:7c:04:c3:08:4e:
c7:ef:54:3b:fb:e9:76:99:3d:8a:2b:2c:7f:e1:3e:
66:76:70:a2:fb:cd:9e:66:b8:a4:6b:66:9d:09:14:
74:db:bd:ad:59:ff:04:10:b2:bd:54:dc:e7:da:c7:
9f:87:0e:00:54:c6:77:4a:cd:2e:ec:ea:7a:5f:c5:
2f:9d:2e:07:69:74:77:5a:00:74:5e:57:6e:ca:6a:
47:8c:8c:29:a8:84:88:57:80:04:0c:0f:8a:3b:14:
c3:9b:81:f9:08:72:b6:68:58:05:38:10:60:fa:3a:
12:90:1f:5b:9b:e6:5a:84:71:a9:28:ab:c5:4f:8d:
78:4d:58:7c:54:a3:4f:79:14:40:be:45:63:b6:7b:
6d:10:0e:df:78:bf:2e:19:14:37:82:c2:e0:07:32:
7f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.90.172.0/24
103.97.175.0/24
103.97.200.0/23
123.253.224.0/22
IPv6:
2001:df0:e100::/48
Signature Algorithm: sha256WithRSAEncryption
94:b3:a8:15:6e:c3:96:a3:89:f1:79:ce:36:21:14:45:aa:e1:
d7:2b:8c:c7:31:15:bb:be:eb:cd:00:1d:51:9b:83:c6:52:ea:
64:f1:ff:28:cd:92:98:9e:21:47:45:31:b5:4a:db:ca:8e:e3:
d5:67:01:bc:77:72:0a:cc:2f:64:9f:1c:43:0e:fc:bc:c0:15:
1b:70:dd:36:99:2e:23:be:57:1d:1a:6d:0e:b5:ea:a5:5c:37:
34:bf:69:d1:69:97:ba:e1:88:c7:4b:da:cf:97:88:71:b4:8b:
50:00:d5:f6:38:d8:02:54:7c:4b:e7:d7:6f:f0:56:55:81:32:
80:5b:cd:d1:cd:c4:cd:f9:74:b2:3a:48:f4:c4:e6:77:ff:d2:
33:40:11:e6:79:51:8c:64:b3:5b:1c:3f:00:c4:ce:bb:0f:83:
01:93:53:db:f8:3b:63:92:bf:da:bb:fa:68:ad:3f:94:46:00:
6e:b8:fc:5d:5d:51:c3:2b:ad:32:0c:dd:6b:80:63:95:ba:42:
aa:e2:b8:0e:9b:64:c2:6c:d6:de:04:89:cf:26:d7:bd:4c:bd:
e6:c1:7e:2b:1f:73:e7:5c:18:78:98:07:3b:05:db:b0:41:90:
d2:cb:42:96:eb:47:71:d7:c2:70:06:f2:51:31:88:5d:15:c1:
9d:9d:e7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 30 09:04:36 2025 by rpki-client