Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer
File: _eDYrIjb_GreZ9__WjrC7yZsXNw.cer (raw, json)
Hash identifier: 9jOU9Go7vHI2lI4j+ADfGstv7Ml0yBWDLgzLWK+q8Ko=
Subject key identifier: FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0245BE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 13 May 2025 02:19:55 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: IP: 203.3.100.0/22
IP: 203.27.72.0/24
IP: 203.27.194.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Jun 2025 07:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148926 (0x245be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 13 02:19:55 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91E7FA1, serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:1f:99:cf:40:bc:c8:b1:94:1f:05:6f:ff:
b4:0c:b9:36:43:f9:cf:3f:aa:8f:c4:6f:7b:93:ac:
81:a8:8e:46:8c:3a:ba:ee:a0:81:a8:d3:1a:0b:17:
89:b9:be:49:3b:ad:e1:50:f4:85:2d:92:a8:67:7a:
b0:30:48:d8:14:08:ff:5b:ef:c4:70:67:fd:56:c9:
70:13:bc:51:44:12:c0:f3:da:c4:c3:a6:de:f7:b9:
7d:7d:30:04:6e:9a:1e:53:61:b0:d4:7e:5e:bb:ee:
ec:bb:e8:5b:d4:e6:4a:c2:ba:33:a2:a6:42:ab:86:
cf:3c:e4:4d:01:a5:b8:60:81:5f:a3:e6:85:61:fd:
f2:ad:55:68:1e:f9:fd:ce:07:05:2d:ef:16:0a:f0:
af:72:82:56:a1:53:32:38:85:8f:23:df:5f:f1:eb:
d7:c2:b8:30:b3:ad:f6:76:6d:11:d8:51:8d:80:19:
cc:ad:6d:2e:19:c1:71:dd:7f:19:2f:b6:c8:a6:29:
7c:61:62:91:a7:fd:42:59:64:ac:88:d0:7d:d4:7c:
e3:74:ad:85:6f:9e:9c:ea:b2:ff:92:2e:03:83:06:
4b:08:c8:d4:26:49:28:94:50:34:63:2a:5e:d9:04:
16:57:e0:2f:4c:e1:fa:b7:ae:7c:25:ff:1d:0a:75:
fa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.3.100.0/22
203.27.72.0/24
203.27.194.0/24
Signature Algorithm: sha256WithRSAEncryption
15:71:be:f7:a1:96:ca:45:c6:ae:31:00:b1:d7:04:51:4a:b0:
c7:77:dd:55:9b:4c:68:d2:87:09:ab:16:54:79:50:82:63:e6:
78:a2:5b:51:b3:08:9d:06:0b:d5:19:c4:70:4d:61:87:95:13:
62:38:ac:ed:3f:8e:c1:59:1a:c3:2c:64:d1:cb:18:4a:7e:71:
0d:ab:de:aa:ab:e0:8a:12:e5:31:a3:be:d1:09:ca:22:68:5a:
ee:a0:a4:3f:73:7e:49:56:e8:62:8f:de:3b:8e:18:7e:4a:70:
cd:ac:19:00:32:5d:95:62:c0:08:77:aa:63:79:c8:db:d7:c7:
b5:e0:b2:f9:53:60:c2:4d:c5:92:68:17:dd:29:6c:f6:b3:79:
b3:88:a8:f8:d2:7e:73:8e:95:bc:71:ce:de:ac:64:cc:54:7d:
51:7a:90:61:ab:39:0f:24:56:4c:42:2d:e5:37:ff:0c:4a:37:
22:72:a1:55:eb:df:8e:7a:eb:cb:f3:55:a7:e5:8d:8c:ef:c0:
46:ad:56:37:aa:de:41:21:74:95:b7:11:18:68:91:1a:85:ef:
57:93:72:4e:ed:dd:3c:fd:27:0d:bf:1c:23:0e:f7:76:b8:e5:
92:3f:60:5d:24:09:ff:c6:61:78:9a:25:77:11:a4:5f:13:0c:
c4:08:9a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 30 09:07:05 2025 by rpki-client