Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer
File: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer (raw, json)
Hash identifier: AkMEgkx8AoK21NTwtbJzBL3QyOdNq4kZI/wLmeGqoWA=
Subject key identifier: D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02560D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 16 Jul 2025 12:46:39 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 38744
IP: 49.0.32.0 -- 49.0.55.255
IP: 117.58.240.0/21
IP: 2404:b580::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 02:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153101 (0x2560d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 16 12:46:39 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A9122219, serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:fe:77:80:c9:cb:46:cc:5a:7e:b0:b6:3f:
96:77:e0:5e:93:cd:3e:83:63:3e:17:c7:a6:6a:5c:
d9:86:fd:ce:d0:f8:85:00:fd:9a:50:b6:71:0d:55:
cf:78:40:ae:4c:cc:07:a6:01:88:01:ce:a4:88:c7:
72:6c:d4:22:65:6e:56:d8:26:3e:1e:60:6c:fd:f6:
ef:89:8e:2c:71:30:c7:62:78:1b:6d:10:76:93:7d:
ed:ac:ec:7d:f3:93:fb:b7:22:85:fc:f0:ed:6a:c9:
84:c4:be:a8:54:25:dc:e2:1f:39:f2:da:ed:60:c1:
ac:bc:03:ec:55:4c:77:db:f9:b2:6a:bc:83:1f:60:
a8:bf:25:55:ea:ae:d5:82:22:c1:a9:9d:09:3b:2a:
e2:89:aa:7a:f7:38:bf:ac:c0:09:80:25:c2:05:ff:
9a:af:37:36:e3:bc:d9:49:d7:e2:03:eb:5d:95:2c:
34:93:06:2a:6c:a7:49:98:d6:9f:66:d2:0b:b2:6a:
28:dc:8d:45:5f:11:8d:8f:f2:8b:8a:21:07:dd:ab:
ae:cb:a7:ea:68:3c:d7:96:a2:df:64:30:36:30:0b:
ac:6c:d1:49:3f:88:fa:b6:a7:83:94:ab:64:5d:0a:
8a:17:b4:34:b1:fd:e9:66:db:9a:45:97:81:74:a9:
1d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38744
sbgp-ipAddrBlock: critical
IPv4:
49.0.32.0-49.0.55.255
117.58.240.0/21
IPv6:
2404:b580::/32
Signature Algorithm: sha256WithRSAEncryption
c6:12:4a:38:2e:50:ad:cc:9e:04:30:0c:cc:fe:80:3e:cf:67:
82:98:d6:3b:40:f8:9d:9d:92:c5:36:ec:88:7b:5b:2c:c7:cc:
7c:58:d7:d7:a8:a4:f3:0d:67:e6:88:bd:fd:ab:d1:85:6b:71:
a3:46:4b:0d:0c:67:7a:28:8a:af:d5:73:73:52:35:48:6d:18:
a3:e1:69:22:af:e1:c3:5f:ca:96:bb:8b:38:2b:41:f8:8c:a1:
eb:59:8e:50:ae:ab:6c:ec:3d:c6:b8:91:3c:f3:50:49:25:a4:
78:f1:62:59:77:92:76:2d:33:18:d5:bf:b6:cd:b5:e2:25:95:
53:5e:84:76:99:d6:5f:96:73:c9:0d:a9:ba:e2:4b:5a:f4:eb:
0f:3b:b3:05:19:72:72:12:f8:7b:57:0a:fc:ae:73:3c:4a:82:
71:3d:5e:d4:04:59:62:a3:4c:59:76:59:7c:9e:ef:13:cd:e2:
49:da:19:68:90:1f:1b:56:6a:bd:42:19:24:47:e3:7a:70:09:
b7:8a:9b:db:01:b8:58:d5:97:d9:b7:1b:74:d6:8e:d8:02:3f:
8e:4c:6a:de:30:f1:99:b9:7a:b2:14:08:d0:ae:00:59:70:10:
d7:db:53:24:1d:16:36:84:0e:35:ef:b9:80:e1:2e:3b:63:41:
ef:42:b6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:56:23 2025 by rpki-client