Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer
File: 7LSEAFYEaoqTIoTqXx4EagIzHOk.cer (raw, json)
Hash identifier: 4WMv2+amwTqtpBGS/M5sI23hM4TIppgfsujIEZmvVUA=
Subject key identifier: EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0234D7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Mar 2025 09:04:20 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 152479
IP: 2401:cfa0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144599 (0x234d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 3 09:04:20 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9149E50, serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:0e:6a:67:fa:14:d3:8f:91:3d:a6:e9:a4:
88:72:22:96:f4:a9:4c:a9:db:97:7e:d2:20:b5:77:
e7:84:12:32:2d:a2:91:28:23:fb:f4:29:c0:65:f0:
3a:ee:ff:38:cf:1c:52:57:50:5a:98:22:7c:2b:0d:
aa:a3:7d:b4:ef:78:bf:dd:79:22:5b:e7:7a:90:4e:
ae:e3:af:93:1f:97:93:83:25:a6:cf:de:89:6e:20:
a4:9a:30:ab:89:49:f3:be:0e:b7:2d:1b:d9:2d:d2:
02:00:9d:f3:d7:33:dc:3a:a7:7f:06:1b:8a:25:e3:
b5:3a:6b:c6:df:a9:92:2b:f1:71:2f:1c:99:e3:b7:
b9:af:20:17:1b:0d:6c:9d:7c:01:ae:aa:83:f2:19:
ee:70:e1:e9:ed:3d:be:85:89:b1:24:bf:05:4a:ad:
3f:4c:de:91:17:fe:e9:88:ff:b7:0c:a6:0f:51:8d:
30:af:9b:0e:b1:99:fd:35:a2:bb:47:a2:2f:b6:d8:
34:78:0d:32:35:06:b3:25:50:1e:9c:cf:a6:5c:d1:
a2:2e:9f:88:58:47:e7:c5:8f:bb:7f:b3:4b:88:9a:
fc:e3:8a:10:80:0a:d3:a7:e3:af:92:67:27:ec:66:
5c:b5:34:91:0f:90:6c:e3:68:ca:ff:05:0a:e4:4e:
1c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152479
sbgp-ipAddrBlock: critical
IPv6:
2401:cfa0::/32
Signature Algorithm: sha256WithRSAEncryption
9c:58:04:d7:2d:e9:ac:53:4c:2f:9c:bf:f2:e4:93:0d:3a:f4:
cf:42:e9:47:04:ff:c2:d5:d8:06:f7:bb:50:78:c3:25:3d:e1:
16:a7:bf:5d:cd:cc:aa:fa:d7:c4:73:c6:f6:f2:14:67:bc:55:
b0:4a:8e:49:06:7e:86:a0:2c:69:9b:54:7f:c4:2f:42:e7:de:
08:1b:8b:fc:f0:82:d2:1b:ea:1f:1a:11:51:c1:7d:71:c5:ab:
81:d2:14:81:ad:7b:84:54:eb:c2:4b:d3:f8:6a:1c:b1:d6:15:
97:fe:5b:b7:b4:c8:a7:8d:3a:dc:23:b5:15:8d:e1:9c:68:2d:
be:5c:76:18:21:4c:27:38:c1:74:af:a1:ec:98:74:16:71:2d:
8c:db:20:22:8d:64:d0:79:91:f4:ce:4a:52:3b:79:fc:8f:19:
b3:ce:de:9e:fb:bc:9a:6d:81:f7:f6:0e:8d:3d:77:35:67:fc:
b7:24:05:04:a6:bd:99:d6:a3:c8:d6:c1:6f:b0:b0:59:15:ce:
45:de:d9:f1:ff:ff:3f:d2:4f:f0:12:5e:ad:99:2e:4d:23:be:
c9:e1:e5:9a:fc:21:ef:31:c7:80:01:24:ba:8c:b3:4e:ba:11:
4b:ad:1f:9e:fa:6b:80:ed:56:47:8b:ba:37:45:79:08:60:78:
48:85:50:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:00:30 2025 by rpki-client