Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
File: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer (raw, json)
Hash identifier: ExqCYsF06+Ilkb9PbBei6f4ckw/JIaKYgTymPFGvzc8=
Subject key identifier: FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024709
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 18 May 2025 13:31:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 45766
IP: 45.127.48.0/22
IP: 103.40.226.0/23
IP: 103.51.2.0/23
IP: 113.21.228.0/22
IP: 2400:f940::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Jun 2025 07:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149257 (0x24709)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 18 13:31:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A914A8CB, serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:50:7a:71:08:98:85:8b:41:08:79:bd:41:d2:
3c:c2:b5:34:a8:ab:a9:95:b9:0c:2b:78:d4:8d:a8:
c7:9e:2d:a6:7b:77:3d:c1:f0:69:7b:33:be:d4:4b:
55:24:47:28:96:c0:bd:c1:3e:76:a4:99:63:82:35:
96:45:3c:1e:05:aa:e9:f8:d6:18:cc:71:8b:eb:69:
2a:b3:f4:b0:84:50:9d:13:3a:f6:53:85:b3:82:9f:
a2:53:66:db:53:c9:59:79:bd:ac:fd:f5:d3:7c:35:
7f:c0:a0:cc:41:f6:59:fc:db:4c:7e:4c:9a:fe:0d:
66:39:d1:e3:13:46:78:45:d5:aa:64:07:ae:3d:b0:
bb:6d:4f:65:27:c3:87:2e:11:1b:ca:e7:82:c9:3d:
8a:c5:42:02:ac:3e:51:47:7a:86:99:5d:f0:dc:29:
38:0d:7d:b5:89:81:7d:2d:83:32:3f:1f:61:36:17:
59:4e:8d:e5:36:35:9d:54:ba:6c:82:e9:7e:9b:9e:
da:8d:63:83:ae:44:5d:7a:08:7e:a1:a3:c6:c3:01:
c1:7f:93:dd:11:85:ce:f7:6d:78:2c:67:03:f7:d7:
0c:de:1c:3d:b2:a2:7f:8a:94:d3:44:14:41:7b:e6:
a5:3a:53:ca:5b:1c:b8:a3:d5:58:58:f9:b9:17:b6:
fe:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45766
sbgp-ipAddrBlock: critical
IPv4:
45.127.48.0/22
103.40.226.0/23
103.51.2.0/23
113.21.228.0/22
IPv6:
2400:f940::/32
Signature Algorithm: sha256WithRSAEncryption
40:aa:24:11:4f:9b:53:6b:ff:80:98:f9:d9:95:16:c1:2b:6a:
79:43:b8:b4:4a:2d:ab:de:66:7b:5c:e1:1d:11:e7:78:c2:c6:
7b:b7:72:74:27:13:f6:33:5a:e5:2d:ea:34:01:a9:00:a7:e1:
ae:a2:7c:c3:42:a1:92:20:ce:9a:2c:a5:3a:53:5d:17:5f:76:
79:b7:e2:6c:26:90:72:40:57:68:32:ed:0c:1b:7e:98:30:11:
1f:4b:53:a0:f1:87:d4:f1:d4:60:51:c4:18:af:db:19:e5:a1:
99:74:50:d3:e3:a8:6c:d7:22:66:25:26:2e:d8:43:1d:e9:58:
0b:cb:29:56:b2:ef:e4:f1:e2:48:8e:cc:fb:e3:0a:d3:a5:6e:
3b:4c:ec:af:68:e4:24:13:92:d9:f5:ef:f8:1a:18:49:26:86:
0b:11:96:2a:7f:11:7f:d7:c7:65:c5:0e:f9:3d:13:89:4d:ce:
a0:79:f6:5c:d5:03:79:f6:cb:4a:c0:e4:db:26:52:0b:70:3c:
ce:27:77:1e:05:54:bf:3e:cc:1e:a9:e2:b9:06:8d:3c:43:ac:
8a:4d:e5:5a:66:01:34:d2:92:7f:d0:d9:60:ac:59:ac:b7:96:
d8:b0:e9:1f:d7:ce:0e:42:1b:9b:f8:3f:07:74:2c:37:9f:b2:
b4:d4:ad:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 30 08:42:02 2025 by rpki-client