Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer
File: WjWLSErYf-ApwQHa5tLtgo2GBVM.cer (raw, json)
Hash identifier: iFNuezzUC0aC8rszy6a6EJRIv5L7Svpn40fj2OUU9F8=
Subject key identifier: 5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02480B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 22 May 2025 08:26:09 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 103.5.220.0/22
IP: 124.158.192.0/19
IP: 180.131.160.0/19
IP: 202.55.32.0/19
IP: 202.80.128.0/20
IP: 202.92.160.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Jun 2025 07:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149515 (0x2480b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 22 08:26:09 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A9125949, serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:43:88:a2:ca:9e:f2:80:a6:90:ef:d7:d5:
8d:75:b2:ae:76:79:59:ed:8b:75:7c:ac:b7:d8:03:
ba:19:e2:fd:79:6a:de:fa:d0:d4:98:c6:7f:51:b4:
da:3b:8a:63:ef:bf:e6:39:97:60:dd:ed:04:44:1a:
bf:40:56:e7:8e:27:b2:dc:4d:09:32:2b:b5:86:24:
c4:9a:81:8f:f3:8d:ae:7d:36:68:2b:eb:80:99:2f:
51:d4:bf:63:c6:1c:0e:95:65:92:a6:ad:9d:52:9d:
84:d8:86:25:8a:3b:3a:2b:e2:31:46:27:32:c3:9f:
c1:5c:f6:f6:ea:86:32:fd:a4:0f:21:8b:ef:af:31:
ed:ed:cb:04:17:60:6f:9d:3e:5b:07:ec:e6:4b:e8:
40:f0:17:31:a9:48:30:ad:64:83:a5:1f:9f:92:75:
db:d7:8f:c1:6b:18:59:fc:69:ac:d4:f0:8e:a8:e6:
ae:e9:74:12:89:0e:22:2e:02:90:f9:ba:41:43:b2:
69:03:97:61:bf:8a:01:e1:a2:76:84:8d:de:cc:03:
ac:9c:79:e5:61:f2:ea:96:5a:94:a7:14:b0:4a:50:
a1:09:41:4e:00:57:2f:2b:03:e3:7a:fc:63:7c:da:
31:5d:d3:04:92:d9:dd:58:36:f4:9e:9a:bb:ad:3d:
81:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.220.0/22
124.158.192.0/19
180.131.160.0/19
202.55.32.0/19
202.80.128.0/20
202.92.160.0/19
Signature Algorithm: sha256WithRSAEncryption
29:db:72:63:91:5c:de:8b:3a:c6:69:9b:fc:ed:94:3d:07:b3:
61:f8:c0:a9:93:af:da:d3:9f:39:39:74:9c:18:f1:a1:1f:5d:
b9:dd:f2:2a:ad:c9:cc:20:07:62:c6:88:0d:34:4a:38:46:42:
e9:73:5c:37:d9:d0:40:c0:64:ee:c3:31:db:17:62:3e:b7:14:
a9:40:92:da:eb:ac:fc:6d:de:d9:94:1b:8f:67:b8:d6:77:b1:
ce:d8:7e:b8:30:47:a6:ed:ee:6f:e7:1b:35:7a:a7:d8:f7:11:
6e:7d:36:d0:c5:3d:f1:34:b7:9c:45:9b:2a:01:64:44:73:88:
45:38:34:58:42:0c:50:cd:6a:43:5a:38:2f:17:3b:cb:ce:c7:
c6:dd:77:99:eb:4d:3b:f7:33:0b:85:14:e3:62:aa:72:db:58:
01:31:75:35:ca:62:30:35:89:a2:6f:e9:50:f3:57:71:4c:9f:
88:be:b8:5e:06:e2:1d:30:95:39:e7:e3:f1:d5:15:6c:ff:72:
64:48:bf:2e:80:4c:78:dc:be:36:1b:53:9a:33:8d:5d:ee:fa:
93:bb:fb:c6:be:11:8e:79:de:bd:15:34:35:fc:a1:db:c5:31:
5a:08:c3:30:44:10:b3:ee:cd:25:60:4f:e9:eb:62:15:d1:74:
9c:93:72:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 30 08:43:13 2025 by rpki-client