Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer
File: 1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer (raw, json)
Hash identifier: 4h9vyB8VAvXVueDBqeEq6KAER1MYuCRJPxJhoYExYTY=
Subject key identifier: D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025827
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 27 Jul 2025 13:00:29 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 38310
IP: 122.200.16.0/21
IP: 2404:7300::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 04:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153639 (0x25827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 27 13:00:29 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A912879A, serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:76:95:0f:d0:a2:30:d3:f7:c9:1b:12:f0:
36:42:33:29:fe:89:21:48:dd:a0:cf:90:a2:17:80:
51:a3:5c:4b:5a:21:30:be:9b:da:56:11:04:00:4e:
6e:8d:0c:0b:5a:13:6e:b0:6c:58:fd:d1:7b:86:f3:
d8:d2:d1:ea:79:c0:36:25:4a:ab:ae:ba:7e:97:d0:
3a:03:e7:d4:61:19:d3:9e:1a:af:6d:82:45:25:5c:
7a:ca:41:7b:17:1e:01:d6:77:0e:01:e0:d8:b8:fd:
30:8b:94:19:d5:55:62:f3:9f:17:25:1c:77:b2:e2:
24:12:a8:5b:f5:29:e6:4d:78:9d:0b:2c:b2:91:41:
24:9a:1f:fb:6c:0d:00:3c:94:0f:ee:2e:28:dc:d5:
5f:dd:99:92:19:c2:22:ff:58:45:ce:e0:1f:de:d0:
ed:67:be:f7:4a:92:c2:de:ef:a9:59:f5:ca:4c:2d:
c9:e6:9d:13:1b:99:0c:87:04:13:ce:3e:2f:bc:33:
fb:3c:ad:e0:84:6a:2b:e3:79:1f:ec:8e:e8:df:36:
9a:53:f6:46:81:c6:66:71:1d:e8:76:2b:70:2c:37:
3e:54:d9:00:fe:bc:6c:63:4f:1c:4c:da:07:5d:25:
c7:6d:69:bb:09:d6:57:0f:4b:d0:f2:b7:74:7b:48:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38310
sbgp-ipAddrBlock: critical
IPv4:
122.200.16.0/21
IPv6:
2404:7300::/32
Signature Algorithm: sha256WithRSAEncryption
d0:21:72:e8:73:cf:55:23:9b:26:64:6a:00:f0:50:38:fc:3a:
ef:ba:1c:ce:7f:9e:b2:81:ce:7b:9a:e6:03:a2:bb:2a:86:1c:
6f:13:94:df:a0:59:ad:09:ad:e9:75:8c:cf:6e:a3:35:c7:c7:
67:8c:8d:7c:64:3f:04:86:02:d5:83:3c:c3:0c:74:3d:a8:8a:
b8:6f:a8:c3:65:74:36:c1:e2:fa:0b:9e:1c:49:d5:bb:1c:f4:
f6:4c:95:95:17:0a:b6:fa:41:b8:d7:1b:59:42:42:f1:dd:32:
ef:ed:1d:a5:04:58:1c:34:27:9d:3d:93:d8:4f:18:d9:0a:a5:
6a:62:eb:55:34:ac:4f:69:e1:2b:a2:0b:7e:25:74:ba:82:82:
05:f5:75:33:3b:55:e0:3c:a4:c8:6b:0e:07:20:0e:56:53:26:
26:55:91:b5:e3:ff:25:75:a0:b3:8e:16:d1:ee:94:8d:50:3f:
30:eb:e6:ca:a3:7f:72:2e:09:ea:2b:ff:38:e8:52:74:bf:ab:
d7:6f:15:ba:15:4c:a5:62:4b:24:15:8d:6f:1a:1f:7b:f2:0d:
c4:69:b6:22:49:c6:11:36:91:43:87:34:f6:1c:c4:a0:88:93:
91:7d:0c:28:6a:15:34:a2:29:d5:b2:68:48:cd:1d:a5:9e:69:
b6:93:2a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:30:41 2025 by rpki-client