Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftbUapI4CVWx5EDUiXcsdFkgBsg.cer
File: ftbUapI4CVWx5EDUiXcsdFkgBsg.cer (raw, json)
Hash identifier: r2Ts2+IWx9c6iUFRW93j2yXLENe++DuPWZ+1CSakj6k=
Subject key identifier: 7E:D6:D4:6A:92:38:09:55:B1:E4:40:D4:89:77:2C:74:59:20:06:C8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025320
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/6/7ED6D46A92380955B1E440D489772C74592006C8.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/6/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 03 Jul 2025 04:17:15 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 149301
IP: 2001:df3:efc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152352 (0x25320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 3 04:17:15 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91650860000, serialNumber=7ED6D46A92380955B1E440D489772C74592006C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a2:ab:49:34:bf:7a:59:4e:d9:32:53:0c:92:
d2:af:ce:bc:2a:18:6d:52:4b:8a:0b:6b:46:70:15:
0f:12:6d:66:99:b6:ca:13:e0:6e:a8:ed:d1:bf:d5:
d5:17:45:2e:0a:6a:3f:a2:11:1a:43:a1:78:bb:30:
8f:88:48:8b:3b:08:e4:b8:3c:67:f0:ec:c9:17:06:
1a:da:00:3c:52:ea:ad:42:02:26:ce:c0:42:58:38:
d2:ee:cb:d3:2b:56:21:2a:57:29:3d:1e:a9:8f:74:
b5:2c:ed:16:75:24:4a:e4:55:f2:92:d9:a1:a6:0b:
54:21:f3:c2:35:42:0d:d3:d6:a5:70:b7:9f:5e:ba:
95:d6:8b:47:e1:20:a5:78:45:b9:46:22:93:5d:18:
0d:4b:75:7d:cb:f7:42:e0:10:fa:44:b3:6e:d2:d8:
c9:f8:06:c6:7b:01:95:28:9c:7c:b4:a2:95:c4:96:
43:10:d5:f9:dc:03:94:64:4e:3b:74:67:3e:b4:c5:
38:c7:49:b8:f2:19:ee:03:bb:f9:9c:66:19:31:67:
a2:60:59:1b:13:a3:ae:d0:98:8c:46:14:c5:15:2a:
5b:bb:a9:5f:f8:80:3a:82:bc:41:ac:b7:4d:42:ad:
b0:2a:cc:3c:f6:de:de:7e:9f:ca:bc:e5:54:04:9b:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D6:D4:6A:92:38:09:55:B1:E4:40:D4:89:77:2C:74:59:20:06:C8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/6/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/6/7ED6D46A92380955B1E440D489772C74592006C8.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149301
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:efc0::/48
Signature Algorithm: sha256WithRSAEncryption
54:17:58:48:b3:07:3a:97:cd:41:00:ce:65:01:11:ec:da:8f:
d9:70:8d:4b:15:97:50:85:c4:00:1f:90:e7:89:fa:2e:50:88:
d2:cf:be:04:e2:10:76:14:39:9f:86:8a:c6:8d:11:10:c2:17:
bc:df:d2:ba:65:4a:36:08:e9:48:a9:3d:78:09:32:70:9e:55:
94:a6:70:21:6a:6e:15:2a:27:74:29:e1:e8:5d:a3:07:a9:77:
48:a3:ef:2d:98:8b:d7:6c:94:9c:ff:d9:c2:a5:ad:47:52:70:
16:8c:0d:aa:28:63:41:e9:20:14:74:3d:44:6d:a7:e2:25:71:
c3:09:5e:98:e7:d4:12:da:2a:bd:8e:69:7f:90:4e:2e:70:a1:
7b:80:41:2f:c1:f7:3c:06:45:71:1d:71:f5:8c:a9:23:d4:8b:
f4:b0:46:8a:2a:e3:28:49:2c:ac:39:45:55:95:59:37:e9:b5:
de:8a:41:18:c6:eb:44:69:f9:06:56:05:ae:93:f8:2f:f6:46:
91:4b:2c:5d:f9:a9:ae:d6:76:8d:5f:32:99:81:12:42:6b:86:
2b:94:58:7d:6a:6a:07:dc:be:07:ea:ed:85:f6:eb:b0:bb:1b:
df:32:2d:a7:b1:b4:3f:e4:39:c7:6b:bb:94:ea:da:bd:e4:0f:
8c:78:e3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 00:08:12 2025 by rpki-client