Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer
File: cjdHbP3kFQq5UJerug_t7UKtuas.cer (raw, json)
Hash identifier: DWAUWKxutfxq5P9sLb9TTYPvWFlBiFn/uOb54W6PcFQ=
Subject key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024695
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 16 May 2025 00:31:07 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 103.54.111.0/24
IP: 103.67.167.0/24
IP: 2001:df2:ea00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Jun 2025 07:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149141 (0x24695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 16 00:31:07 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f1:54:c7:6c:5e:ec:d2:aa:2b:74:40:df:59:
ce:26:dc:30:a7:c2:a2:10:0e:0d:b7:60:95:46:8b:
cd:26:7d:c6:3a:6b:9b:90:ab:8e:6f:82:27:86:8e:
3f:ad:a2:bf:79:d6:40:42:f3:67:e9:3b:ac:ed:8e:
d2:a7:d4:2a:45:6d:96:f5:9a:57:2f:30:9a:ec:00:
e3:b4:e1:ca:da:46:79:35:74:d9:61:30:54:cd:a5:
cf:ef:38:da:85:19:ff:f3:6f:9e:33:c2:fb:2d:34:
1c:82:64:54:01:60:f8:b5:cb:24:26:1c:8e:b3:93:
ce:8f:b4:ea:f3:09:12:f5:67:ab:f7:ab:48:8d:4d:
ee:6c:c8:a0:e4:33:9d:05:86:cb:53:f9:88:4d:17:
78:ce:dc:89:3f:9e:26:8c:8d:cb:5d:56:5d:5c:f7:
67:cb:9f:15:cd:2c:84:6a:bf:5b:be:ea:53:2f:59:
bd:9f:26:df:e7:d3:6c:ba:cf:18:00:4a:33:ca:9e:
82:5b:73:af:73:4c:15:e1:db:58:38:2d:54:25:b5:
42:1b:6e:1d:ea:1d:3e:f6:95:71:7b:f6:d3:a8:30:
4e:6f:25:52:07:93:1d:33:48:5a:30:d8:46:d2:b7:
e7:1f:df:3a:c9:da:a0:dc:31:f4:a7:2a:b5:75:36:
ef:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.111.0/24
103.67.167.0/24
IPv6:
2001:df2:ea00::/48
Signature Algorithm: sha256WithRSAEncryption
a0:be:70:f5:b6:93:e9:8f:14:40:6a:64:a8:4e:8b:5c:fa:9d:
93:18:c2:6b:6a:1b:9d:b5:a6:a6:63:1a:af:65:f4:c8:c6:3c:
e6:af:a0:6b:c1:c2:b8:4d:22:5b:c7:c3:95:71:8d:f1:38:97:
6b:f9:8f:7a:33:d3:e5:65:26:09:f0:2e:5d:61:b7:e2:26:4a:
59:f9:6f:18:a4:f0:5f:00:7f:64:76:cb:c4:b6:59:9d:68:71:
2d:e7:a7:38:83:83:6d:7c:47:20:e6:c9:17:d8:41:d1:85:8d:
a3:0e:1b:db:04:2d:1e:94:2b:cf:08:8b:82:83:33:c8:fb:91:
4c:bf:19:90:9f:84:5f:56:2c:97:13:a2:f0:8d:51:42:32:2d:
8d:0c:77:6d:ce:a0:f3:b3:12:0c:de:b8:2c:55:93:fb:5a:ba:
4d:b8:a2:28:87:ab:fa:45:55:10:d7:15:97:a5:1f:d8:1a:7a:
22:7f:80:38:1d:91:0d:7a:33:66:79:e2:c4:b0:0b:aa:f9:73:
6b:72:b4:bc:f0:15:93:7a:8a:01:7b:e1:24:eb:9c:cf:4e:57:
d6:a9:e0:2a:3c:7e:d2:c8:1d:55:86:3c:bf:43:b1:d9:2c:01:
84:8b:e3:29:64:e2:e3:e6:fb:a6:db:3a:31:a5:ef:69:ad:90:
6f:61:4b:f1
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgIDAkaVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDUxNjAwMzEwN1oXDTI2MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRjRGRTYxMTAvBgNVBAUTKDcyMzc0NzZDRkRFNDE1MEFCOTUwOTdB
QkJBMEZFREVENDJBREI5QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDT8VTHbF7s0qordEDfWc4m3DCnwqIQDg23YJVGi80mfcY6a5uQq45vgieGjj+t
or951kBC82fpO6ztjtKn1CpFbZb1mlcvMJrsAOO04craRnk1dNlhMFTNpc/vONqF
Gf/zb54zwvstNByCZFQBYPi1yyQmHI6zk86PtOrzCRL1Z6v3q0iNTe5syKDkM50F
hstT+YhNF3jO3Ik/niaMjctdVl1c92fLnxXNLIRqv1u+6lMvWb2fJt/n02y6zxgA
SjPKnoJbc69zTBXh21g4LVQltUIbbh3qHT72lXF79tOoME5vJVIHkx0zSFow2EbS
t+cf3zrJ2qDcMfSnKrV1Nu8lAgMBAAGjggMKMIIDBjAdBgNVHQ4EFgQUcjdHbP3k
FQq5UJerug/t7UKtuaswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUY0RkU2L0JCMDk1ODJDN0RENDExRUE5NEJFQUY3OUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFGNEZFNi9CQjA5NTgyQzdERDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAz
a0ZRcTVVSmVydWdfdDdVS3R1YXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8EJzAl
MBIEAgABMAwDBABnNm8DBABnQ6cwDwQCAAIwCQMHACABDfLqADANBgkqhkiG9w0B
AQsFAAOCAQEAoL5w9baT6Y8UQGpkqE6LXPqdkxjCa2obnbWmpmMar2X0yMY85q+g
a8HCuE0iW8fDlXGN8TiXa/mPejPT5WUmCfAuXWG34iZKWflvGKTwXwB/ZHbLxLZZ
nWhxLeenOIODbXxHIObJF9hB0YWNow4b2wQtHpQrzwiLgoMzyPuRTL8ZkJ+EX1Ys
lxOi8I1RQjItjQx3bc6g87MSDN64LFWT+1q6TbiiKIer+kVVENcVl6Uf2Bp6In+A
OB2RDXozZnnixLALqvlza3K0vPAVk3qKAXvhJOucz05X1qngKjx+0sgdVYY8v0Ox
2SwBhIvjKWTi4+b7pts6MaXvaa2Qb2FL8Q==
-----END CERTIFICATE-----
Generated at Fri May 30 09:01:45 2025 by rpki-client