Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer
File: 01nlbdoAA8SD861qQMCA6Qy41HI.cer (raw, json)
Hash identifier: WmUwtIb8OolMo8vfY51xx84t8hm+mkVRobwJVvO+9G0=
Subject key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024D7F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 11 Jun 2025 05:25:38 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 103.75.172.0 -- 103.75.174.255
IP: 103.216.98.0/24
IP: 2001:df1:f600::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150911 (0x24d7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 11 05:25:38 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:65:f2:42:37:8d:d2:44:13:2c:4e:f7:14:
1e:17:44:a9:3a:e5:5b:4b:55:ad:5c:1c:e3:ae:df:
46:03:0d:fd:36:76:b5:17:7d:de:93:b5:7a:8e:b3:
f1:6a:99:69:8f:f2:bf:9a:05:84:39:02:6d:b9:a5:
b9:9a:86:d5:21:e8:1b:db:95:64:3f:e8:1e:7c:2d:
ba:6d:96:c9:c0:3d:9e:9a:de:1d:a1:9c:ad:4c:b2:
d0:38:ff:b7:be:d7:a1:cd:29:fb:36:aa:7e:02:6f:
e0:c7:c5:44:62:59:df:de:d7:53:f5:e4:e4:53:75:
2d:bf:47:6c:21:4e:0d:0e:fb:50:d1:54:15:73:3e:
18:ea:fc:9b:c8:cb:25:27:33:e0:d7:9c:ed:e0:cf:
5b:fa:b2:89:c9:05:9c:4b:2c:d2:44:88:43:17:c6:
74:ac:38:bf:07:67:5a:3b:20:42:74:ea:c2:f0:0b:
62:08:23:eb:21:56:49:5c:37:1d:c7:84:0c:ea:bd:
97:b9:a9:a9:c5:2c:4f:4f:61:34:d4:56:f9:64:50:
f5:55:12:e6:c7:25:d0:dd:31:49:23:24:a0:86:2f:
99:2c:ba:f4:51:fc:08:3b:44:80:d8:03:6f:19:c3:
c2:25:65:65:6a:3a:a0:8c:5e:bd:a0:45:14:e0:30:
19:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.75.172.0-103.75.174.255
103.216.98.0/24
IPv6:
2001:df1:f600::/48
Signature Algorithm: sha256WithRSAEncryption
37:5d:79:6b:b0:d0:dd:32:c9:e2:78:37:f0:b6:5c:b9:e2:0c:
a6:49:59:fe:f1:a4:e6:03:e6:f6:d1:ce:0f:fc:ee:24:53:d7:
47:14:00:ff:83:c5:b5:8c:78:81:c7:05:3f:af:6a:4f:59:af:
7d:2f:25:87:1d:27:3a:32:88:e4:24:fe:d1:42:15:92:4f:b3:
02:e6:b4:91:a6:19:6d:9d:2a:49:83:72:d6:cf:9c:5a:f8:0f:
15:57:01:9f:bb:02:c6:59:4a:51:50:57:6f:a9:86:3e:d7:c5:
e1:8e:bc:05:88:f6:f8:f3:b1:b4:d4:7b:d5:69:9b:99:0b:d9:
2e:7d:72:2f:2f:b4:c3:bb:fd:fb:3f:ed:0c:76:05:40:69:a7:
6d:18:e8:33:74:f4:d5:ea:df:60:b1:6c:df:b2:a0:7b:f0:98:
ee:0f:42:ec:5f:15:eb:77:ea:78:fa:65:84:75:99:5b:3a:cc:
83:a8:c3:b7:d6:e7:b3:73:1a:c7:48:5f:13:e0:43:77:55:92:
28:9c:65:ed:cb:83:16:7e:44:ea:bf:d1:40:e5:cf:76:37:86:
8a:c3:d2:1f:60:89:ca:62:5f:d1:c3:87:04:8f:b3:f8:5d:68:
27:3a:5e:bf:c6:32:31:bc:62:6c:c5:92:db:93:62:9f:c8:26:
37:c5:b9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:51:40 2025 by rpki-client