Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
File: 0N7PEI0mgBt8l-NJAprx_PkKhV4.cer (raw, json)
Hash identifier: MMLG3r6UKOufWMwwDMj5Z549Tf7w/fJ3eSiOPcKF5g8=
Subject key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024BAF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 03 Jun 2025 05:21:43 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 131314
IP: 103.28.144.0/22
IP: 2401:a2a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 16:13:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150447 (0x24baf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 3 05:21:43 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A915408A, serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:79:9b:5e:66:61:32:8a:b5:e6:bc:cb:64:0b:
bb:de:b3:b2:c1:38:86:83:d1:41:8f:0d:a7:e9:4e:
d0:ac:de:5c:7a:05:0f:47:37:fb:ab:4c:8c:bf:17:
49:68:2c:3b:e4:5b:c5:94:5c:79:c2:d3:ed:36:ff:
8e:82:1d:f6:93:fd:8c:6d:e1:68:c5:4a:b7:01:0b:
f0:54:d5:0f:b6:81:cf:65:14:64:48:9b:f9:a6:95:
90:68:7a:b6:f9:70:0d:42:a1:c2:ff:74:8b:8b:f7:
61:9b:e5:4a:69:34:92:da:87:28:bf:e4:b0:11:ab:
a8:f8:68:fc:e1:81:c4:ab:b0:b9:e9:c2:84:79:28:
3d:9d:68:11:3b:f5:57:39:a7:ff:e3:4b:a0:39:54:
4e:05:3d:c3:a1:65:d2:93:fb:48:10:51:25:fd:87:
f0:b6:66:a5:1e:33:ff:f9:97:60:dd:fa:4f:25:50:
79:67:1a:0c:ef:26:b7:0f:7d:35:c4:ce:17:b5:53:
f0:05:8d:eb:40:0a:25:66:05:ce:c1:68:05:00:67:
3c:37:24:9d:63:50:68:c9:de:83:ab:49:83:43:20:
e5:88:9c:97:2a:f4:0a:c5:2c:a7:45:f6:62:7f:0c:
4b:c4:07:60:7d:7a:83:df:63:50:de:88:48:30:7c:
e9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131314
sbgp-ipAddrBlock: critical
IPv4:
103.28.144.0/22
IPv6:
2401:a2a0::/32
Signature Algorithm: sha256WithRSAEncryption
cc:f3:b3:05:a3:cb:c6:42:2b:be:94:fc:52:02:04:25:8d:07:
bf:4f:2c:e0:d5:4f:d9:d5:66:a6:1e:d8:d5:f5:04:b6:bb:5d:
e2:a2:91:9f:00:a3:90:d1:9d:cb:44:87:f7:49:c6:c1:26:df:
d8:e6:6b:39:89:4e:5a:38:a3:4e:ab:89:73:d8:b8:37:e8:4f:
7b:d5:2d:e9:e6:6b:f4:ed:5a:5c:98:ae:c3:b7:a4:23:78:02:
b7:6b:09:07:a1:a9:83:83:72:ad:5c:64:09:8b:22:7f:e9:a6:
6e:f4:d8:62:fb:b8:0a:91:34:c4:05:20:2a:07:ef:f3:d3:d1:
f3:27:ce:00:04:77:1a:78:cb:77:9e:2c:9e:12:41:03:42:8d:
a8:f6:a2:dc:73:29:2d:35:cb:9f:62:89:39:8d:f5:61:49:24:
b5:f7:2e:56:1c:0b:5a:9f:2d:12:62:a0:78:e6:91:36:85:73:
3f:47:e9:bb:3b:bd:ae:f7:d2:59:94:14:4a:b6:a5:55:30:22:
b6:27:49:d3:9a:0c:c5:67:08:92:5a:f4:30:2c:4d:ed:76:fb:
d6:1a:f8:89:54:ef:24:9e:c6:14:c5:f8:7f:14:43:8e:79:73:
d4:de:42:10:9c:25:f5:a1:b9:55:e9:7c:1a:8c:45:a5:0e:e5:
f3:c7:40:f2
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAkuvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDYwMzA1MjE0M1oXDTI2MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNTQwOEExMTAvBgNVBAUTKEQwREVDRjEwOEQyNjgwMUI3Qzk3RTM0
OTAyOUFGMUZDRjkwQTg1NUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCieZteZmEyirXmvMtkC7ves7LBOIaD0UGPDafpTtCs3lx6BQ9HN/urTIy/F0lo
LDvkW8WUXHnC0+02/46CHfaT/Yxt4WjFSrcBC/BU1Q+2gc9lFGRIm/mmlZBoerb5
cA1CocL/dIuL92Gb5UppNJLahyi/5LARq6j4aPzhgcSrsLnpwoR5KD2daBE79Vc5
p//jS6A5VE4FPcOhZdKT+0gQUSX9h/C2ZqUeM//5l2Dd+k8lUHlnGgzvJrcPfTXE
zhe1U/AFjetACiVmBc7BaAUAZzw3JJ1jUGjJ3oOrSYNDIOWInJcq9ArFLKdF9mJ/
DEvEB2B9eoPfY1DeiEgwfOlLAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU0N7PEI0m
gBt8l+NJAprx/PkKhV4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTU0MDhBLzE4ODQ1RjZDMThBQzExRUZCNkY0ODEzN0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1NDA4QS8xODg0NUY2QzE4QUMxMUVGQjZGNDgxMzdDNEY5QUUwMi8wTjdQRUkw
bWdCdDhsLU5KQXByeF9Qa0toVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgDyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZxyQMA0EAgAC
MAcDBQAkAaKgMA0GCSqGSIb3DQEBCwUAA4IBAQDM87MFo8vGQiu+lPxSAgQljQe/
Tyzg1U/Z1WamHtjV9QS2u13iopGfAKOQ0Z3LRIf3ScbBJt/Y5ms5iU5aOKNOq4lz
2Lg36E971S3p5mv07VpcmK7Dt6QjeAK3awkHoamDg3KtXGQJiyJ/6aZu9Nhi+7gK
kTTEBSAqB+/z09HzJ84ABHcaeMt3niyeEkEDQo2o9qLccyktNcufYok5jfVhSSS1
9y5WHAtany0SYqB45pE2hXM/R+m7O72u99JZlBRKtqVVMCK2J0nTmgzFZwiSWvQw
LE3tdvvWGviJVO8knsYUxfh/FEOOeXPU3kIQnCX1oblV6XwajEWlDuXzx0Dy
-----END CERTIFICATE-----
Generated at Sat Jun 14 18:17:20 2025 by rpki-client