Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer
File: -gEnQNykk8ziA6-q3o68cZqsI7Q.cer (raw, json)
Hash identifier: yCGfGf+TOjEKKTIXqbqc4PWgSsmbVnBW0TQJYdktFQI=
Subject key identifier: FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024A12
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 30 May 2025 21:28:31 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 135327
AS: 151328
IP: 103.197.104.0/23
IP: 2400:fe20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150034 (0x24a12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 30 21:28:31 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91AF404, serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:a7:c4:ac:3d:c8:4d:02:d2:04:56:4d:03:
1a:5f:d0:e8:23:b2:78:00:4d:9c:26:77:04:67:9c:
08:52:4a:d0:d5:99:08:82:c8:d6:e1:e1:58:fa:ac:
87:d7:f5:73:de:8e:5a:49:25:fd:21:53:4c:39:7b:
5c:72:05:6c:42:c6:ee:76:9b:c8:9e:7f:42:8e:3e:
30:9a:30:59:b9:ee:f5:f8:08:1f:e7:1a:e4:c7:e8:
d8:e8:05:3a:b2:7a:48:da:48:95:95:f4:cc:e7:da:
d3:76:25:1a:e8:98:1d:55:67:3a:4c:d7:97:f7:17:
8a:c5:a5:5d:17:bb:09:fd:2a:34:a4:af:c7:7a:4a:
01:48:eb:8e:65:27:de:14:41:53:2f:23:dd:78:eb:
5d:e1:e8:47:f4:ca:1f:8d:83:fe:91:75:35:eb:6b:
e3:31:36:bc:49:e2:8e:b6:ad:3a:5e:43:3d:cc:ae:
dc:dc:c1:66:34:b6:d4:d3:58:81:2a:21:22:d4:43:
a2:4c:9b:90:b2:b0:f6:e8:63:70:1b:52:d7:01:f1:
d8:d7:61:01:d6:af:52:02:39:e7:43:ec:07:76:33:
6f:88:9f:08:c4:b9:0c:65:97:76:aa:41:67:11:cc:
ce:5f:84:16:3b:6c:b1:ef:fd:b6:ee:7f:42:41:8c:
75:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135327
151328
sbgp-ipAddrBlock: critical
IPv4:
103.197.104.0/23
IPv6:
2400:fe20::/32
Signature Algorithm: sha256WithRSAEncryption
7b:08:d4:cb:b1:46:8d:a7:c8:50:c0:2c:75:e8:db:ca:d8:20:
71:03:2b:b3:1b:b8:b2:66:b0:75:e8:37:35:87:31:ad:d3:9b:
3b:22:a7:5b:b0:2c:26:fd:51:b8:02:ea:59:fb:4d:1e:1f:6f:
5f:69:f4:7c:ec:e6:e0:33:59:22:83:91:49:fa:8b:a6:a6:09:
e5:29:13:ea:c1:f5:57:b1:17:5e:f1:e2:85:ae:b7:4b:51:ec:
46:fd:ba:15:43:d9:be:f0:15:e1:8e:fe:d1:33:40:f1:15:83:
cc:48:41:39:e2:a9:c6:fe:3c:66:78:0a:16:d4:bf:f9:34:7d:
db:72:63:09:60:f7:ce:9e:4b:7b:68:68:a1:1d:2c:5b:e5:0b:
66:dc:bd:2f:3f:ad:7b:f3:74:bb:24:98:a8:5e:0d:b4:13:1f:
72:2d:02:f7:28:16:62:c8:52:3b:6e:02:ff:ec:90:3a:22:88:
f8:b3:46:d2:e4:53:2a:08:01:0e:f7:00:64:ad:9f:b2:ec:7d:
e6:92:66:89:db:0c:a5:42:9a:63:33:93:81:e0:a1:1c:98:97:
9e:f3:82:73:81:e7:6a:4e:06:c0:86:85:81:56:be:74:a8:2e:
5e:1e:04:7d:d6:3a:12:25:a4:dc:ef:85:20:8e:61:02:64:82:
23:4a:55:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:00:42 2025 by rpki-client