Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer
File: n6-DQWde9DiWQZk2JUJXLIkoVAw.cer (raw, json)
Hash identifier: /MU+jIdwymHrArCWJxp/T2sshjlwjsIDqHYPKyZg+DI=
Subject key identifier: 9F:AF:83:41:67:5E:F4:38:96:41:99:36:25:42:57:2C:89:28:54:0C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0248E5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 27 May 2025 05:10:58 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 63981
AS: 136144
IP: 45.117.96.0/22
IP: 45.251.64.0 -- 45.251.66.255
IP: 103.29.140.0/22
IP: 103.117.76.0/22
IP: 103.220.8.0/22
IP: 203.166.220.0/22
IP: 2405:a480::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Jun 2025 07:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149733 (0x248e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 27 05:10:58 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91B517C, serialNumber=9FAF8341675EF438964199362542572C8928540C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:40:41:5c:e8:24:03:68:c1:54:14:c9:0b:60:
2b:82:82:1f:1f:a3:b8:52:70:9a:99:78:6e:31:de:
85:e0:bc:63:58:10:53:ac:1a:32:ee:00:42:56:32:
3e:de:81:a0:a7:29:24:c7:32:b6:20:85:7d:b5:6d:
e7:0e:a0:6e:44:a8:d8:c3:c0:21:56:d0:8f:d2:d6:
c7:92:13:07:e3:c0:41:b8:0c:d9:e9:35:07:2d:d5:
b9:89:fa:90:53:53:1d:c2:db:0c:a6:fe:1a:ad:df:
37:d5:33:0e:3d:4e:c3:a2:87:72:a7:bb:34:7e:9d:
93:e5:10:e1:ef:b4:fe:7e:ad:b6:77:40:a0:3a:87:
c2:70:0f:5e:d6:0a:73:cc:51:b9:7b:83:a0:2a:23:
1c:7e:b3:00:ef:50:3b:c6:b0:1a:79:99:06:a1:c8:
00:91:5e:db:fd:60:84:10:93:37:c9:c8:d4:a8:0f:
a8:4f:d3:5f:60:20:5a:e1:3e:70:14:7a:1f:ee:e3:
5a:fa:c3:4b:c9:4e:3f:0e:4b:e7:f6:2c:c3:3b:b8:
95:4a:8a:b2:7b:1b:fd:b8:92:39:98:2b:69:82:53:
61:ea:70:1e:8a:ba:0f:3e:30:5d:ef:1d:d7:34:cc:
5e:ec:3a:ee:69:cb:fc:fd:52:3a:74:68:e8:88:ea:
a8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AF:83:41:67:5E:F4:38:96:41:99:36:25:42:57:2C:89:28:54:0C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63981
136144
sbgp-ipAddrBlock: critical
IPv4:
45.117.96.0/22
45.251.64.0-45.251.66.255
103.29.140.0/22
103.117.76.0/22
103.220.8.0/22
203.166.220.0/22
IPv6:
2405:a480::/32
Signature Algorithm: sha256WithRSAEncryption
7b:c8:51:4d:f8:be:1b:90:77:bd:6f:ed:90:34:8a:6e:bf:71:
4e:4f:c6:f4:df:e2:e9:0e:08:47:fc:99:13:a4:d3:d4:0d:1b:
6a:28:10:b4:0e:2a:d5:24:56:29:a1:3d:97:32:51:b8:6a:04:
38:61:3c:a1:2f:2a:a1:d8:49:4a:34:eb:39:2f:32:e6:5f:db:
1e:32:54:8f:e8:1f:7d:48:2c:47:f9:64:1f:3d:9b:32:c2:7b:
5c:2b:67:5e:fa:83:53:b2:b6:d6:e8:59:20:c3:1a:01:4b:92:
90:4b:d0:4e:fe:10:d7:ae:3a:bb:88:6f:8b:21:5d:ce:bd:f3:
4b:81:c3:24:00:96:b4:40:5c:af:04:c8:18:cf:9a:33:96:42:
9f:98:67:8a:5d:d5:d2:85:ca:db:e4:8d:e5:3a:2d:f4:8b:ef:
12:32:34:66:87:50:53:df:96:76:a7:61:de:53:af:28:ad:8f:
a0:cd:64:9e:b4:63:59:11:65:6d:16:d0:47:70:a8:5a:9d:27:
9f:1a:81:06:e9:0d:35:c3:1d:f9:09:41:e6:fa:5e:47:b8:df:
49:19:fb:e5:f7:39:03:1a:c7:5c:f3:ed:b6:c8:ab:70:b2:ab:
08:42:6e:5a:ee:f9:1c:56:e1:3a:f2:28:79:0f:be:f0:2b:c9:
59:6b:21:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 30 09:26:58 2025 by rpki-client