Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer
File: A47Arrg1DJ2n5vILJtLzULpsJAk.cer (raw, json)
Hash identifier: m5w2g8nhHHFWAtzYiqUriIyYNFknbyozcN6Ydw0bBz8=
Subject key identifier: 03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024A24
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 31 May 2025 12:34:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 134122
IP: 103.105.122.0/23
IP: 2400:eb20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150052 (0x24a24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 31 12:34:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A911B8D9, serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:ec:e3:a7:e8:02:96:e9:16:fe:79:91:dc:
45:85:aa:f4:1d:c0:75:2a:9a:15:bd:d3:79:54:60:
f5:dc:eb:f0:a9:4b:fd:31:3c:7a:ab:9e:fe:0c:c2:
53:3f:91:74:95:b0:32:a0:c0:ca:02:4e:f4:7d:fd:
24:9e:67:ec:e2:06:13:16:55:b5:df:49:77:4d:ac:
ac:9a:5c:70:5b:bf:bb:e1:fd:aa:b2:28:1f:59:d3:
f0:25:20:57:28:d5:d8:4d:1d:90:73:18:2c:8a:0d:
c1:96:19:f3:bf:b3:c7:29:1b:17:de:9a:13:28:90:
ad:78:50:b9:02:28:34:fc:70:52:cd:47:d5:de:e0:
c9:85:17:37:a8:a3:49:6c:fc:09:37:ca:33:9b:26:
32:19:54:71:48:95:16:aa:fe:c5:a6:8a:54:56:5d:
4d:4b:a0:fc:fa:96:0d:36:53:d3:30:cc:53:ab:61:
c6:3c:50:a9:1b:12:8b:ef:7d:56:70:a7:df:ef:6c:
31:4b:03:f6:93:9a:19:39:31:2d:bd:43:77:bd:b0:
29:46:93:cd:ea:0d:d8:75:85:84:f3:91:ab:04:cd:
9d:a0:4a:3d:1c:05:bf:6f:a9:ac:7f:db:76:13:8c:
b7:74:df:6b:ea:8e:ff:42:40:78:28:a3:d8:de:d9:
65:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134122
sbgp-ipAddrBlock: critical
IPv4:
103.105.122.0/23
IPv6:
2400:eb20::/32
Signature Algorithm: sha256WithRSAEncryption
60:4c:8c:e1:57:6a:a4:cb:b6:3e:60:7e:82:57:c4:97:51:a7:
1a:77:61:f9:bb:f4:0e:ed:53:a8:08:8c:a1:c1:e4:aa:a6:5e:
cf:1a:e5:da:c2:22:3d:42:14:5a:51:1c:ca:1e:4d:5f:13:13:
34:0d:a8:2b:5b:c6:29:e5:02:0a:da:0f:a6:47:01:69:7e:74:
01:22:37:6f:0f:74:14:e7:b9:ad:a3:78:2f:f4:a3:81:94:f9:
c2:6d:59:bb:c1:63:b6:8b:4f:7b:46:62:57:4e:c2:a4:ff:0a:
36:00:c6:05:10:72:74:a6:05:d9:6e:8e:87:24:85:56:0e:7e:
67:1f:93:3c:06:b3:90:c3:2d:0c:1f:b5:ed:70:7b:fc:db:34:
a0:18:8d:ea:ca:6e:d4:49:2b:14:1a:e3:1a:2c:2b:c0:22:9a:
45:a4:44:40:06:6c:ca:24:8a:32:a9:f2:eb:b2:a3:ba:e5:a4:
b5:fe:bd:dd:fd:15:27:a7:e0:33:14:bb:8e:f6:a0:f1:56:65:
94:c9:31:e4:28:67:a7:46:8b:c3:0c:08:0c:cc:28:16:38:22:
58:cd:72:66:ea:e4:f9:52:f1:a8:e6:7c:14:a4:a2:20:c1:e4:
3a:11:5b:4e:bc:9a:df:d0:c2:4c:9a:20:03:59:8b:1c:b3:e2:
b7:a1:70:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:01:08 2025 by rpki-client