Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer
File: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer (raw, json)
Hash identifier: hKOo9VO+mMU9r8Bncws9apSLtlNSk8E7wnumFeWU9wo=
Subject key identifier: E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0245D5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 13 May 2025 13:30:06 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 23731
IP: 203.175.120.0/22
IP: 2001:df0:e1::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148949 (0x245d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 13 13:30:06 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A914A47A, serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:43:bf:a3:a4:89:10:7d:85:a8:21:ec:52:
04:44:e7:41:d7:c3:d2:e8:95:d2:08:01:6b:25:e5:
e2:ae:d5:83:75:6a:cd:50:f4:2a:7e:0c:fd:4e:42:
05:47:13:72:6c:38:19:de:9e:1e:ae:e2:3b:87:00:
a4:ac:52:d1:cd:7d:2a:fa:eb:d2:d2:54:56:a4:70:
02:32:4d:b6:e1:fc:da:1e:e4:35:8a:60:61:9f:2a:
0d:e6:eb:4b:b3:93:6d:cb:38:fa:79:8a:8b:10:6b:
e2:f3:f5:5d:90:59:5b:74:2e:5e:de:3f:29:09:fd:
fe:00:5e:be:fc:f2:26:0d:48:d2:70:54:8a:3f:3a:
39:af:24:09:ea:94:cc:7e:c5:53:02:7a:bb:5f:8c:
03:35:19:d4:d8:9c:89:17:a7:5d:90:1f:5d:32:18:
fd:3a:35:2e:c7:df:6a:fa:b5:6f:0e:8a:7b:df:9c:
71:b1:a7:25:ce:5e:44:b2:aa:03:29:80:22:87:0c:
0e:95:af:27:00:68:e0:26:84:54:95:80:f3:3a:74:
3a:2a:bf:aa:e0:2d:28:78:c9:10:26:fe:b9:45:fa:
d0:b8:2d:01:8b:53:19:97:0d:4d:50:f1:d9:91:2b:
34:5f:3d:82:c7:c5:8a:22:86:95:fc:82:e0:f5:c9:
6e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23731
sbgp-ipAddrBlock: critical
IPv4:
203.175.120.0/22
IPv6:
2001:df0:e1::/48
Signature Algorithm: sha256WithRSAEncryption
2c:da:35:13:6c:6a:36:05:38:a3:7f:54:e2:6f:c2:c1:db:da:
81:b4:cd:54:db:43:95:f9:9d:c3:12:11:73:9e:d1:0a:fc:ec:
b2:d5:96:4c:f3:bb:37:b2:2b:4b:18:80:7b:c2:e5:7c:c1:f2:
8e:02:3c:cc:9f:1b:76:38:92:a6:dd:0a:fa:1f:51:14:7b:f2:
dc:d5:81:59:e4:22:45:d9:22:f3:39:ff:fe:b9:1b:85:4b:0c:
71:83:70:8c:71:c9:7e:71:32:87:c1:83:ba:cd:d6:3b:9d:df:
bf:87:4b:2e:91:5e:42:83:32:5a:d6:ac:48:ec:25:07:4b:b0:
3a:4f:67:e6:a0:3d:25:c5:50:95:c2:5f:bc:78:39:c0:68:e6:
60:e7:92:9e:43:b4:db:4b:64:9f:f6:86:9c:aa:ca:28:3f:8b:
01:34:fd:b4:4f:db:60:41:8d:72:c8:e2:9e:df:27:90:71:c8:
e2:45:fa:5b:dc:25:81:77:60:6a:88:51:7f:4b:96:0f:ab:49:
db:43:31:1a:67:d7:38:69:ae:d9:3d:35:00:06:8b:98:57:37:
00:6e:f6:cb:be:59:ff:19:87:7d:0d:13:4e:0b:6f:31:35:6f:
90:9d:98:01:9a:58:b8:68:93:4a:75:11:cc:9f:89:3c:12:41:
8e:96:a2:8f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 14 17:47:46 2025 by rpki-client