Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer
File: Aul8r2u1VIcberzm6NeDIOuURpE.cer (raw, json)
Hash identifier: OXZYvPs7HP+1RZozPV7Osld3sAHpuyIoCJfj6GVK6ms=
Subject key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02597A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 31 Jul 2025 15:58:16 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 133466
IP: 45.112.36.0/22
IP: 103.4.124.0/22
IP: 2401:d00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153978 (0x2597a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 31 15:58:16 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A917A47E, serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:9a:a7:6c:77:ff:85:96:e5:5f:60:0b:7c:
7b:d0:73:9d:19:ed:a4:f9:39:89:ec:3c:65:fb:24:
3a:5c:88:fe:dd:50:b6:cd:b3:53:2f:ef:c0:ee:ce:
07:aa:f4:bd:ac:85:28:af:22:3c:40:73:eb:7b:58:
0f:de:d7:66:37:fb:a1:39:3f:68:95:48:be:0c:cd:
1d:f7:3a:72:d5:99:99:c5:12:47:83:ba:3b:e0:c5:
d6:07:75:5e:8f:d8:ce:5a:1b:28:3e:3c:84:ee:fe:
3b:8f:18:df:0e:de:62:27:f5:ef:d7:b1:2c:05:f1:
54:87:4a:51:b0:4c:d1:45:7d:e2:7b:94:82:d7:c6:
7c:61:a0:32:5b:7a:8c:26:92:2f:31:d6:05:f7:40:
f7:47:9b:b6:a4:c3:12:14:86:a0:6e:c9:10:81:df:
8a:c3:36:cd:77:6c:28:31:2a:0b:4c:e1:d8:bc:c1:
11:8a:eb:ce:4d:22:63:77:a8:b4:58:0f:eb:ce:97:
83:b7:57:fd:31:f1:01:c8:05:00:77:26:70:1f:ec:
f3:e1:8d:6a:c0:fc:eb:e4:54:56:09:20:07:5e:fc:
30:01:e7:4a:78:ee:0e:84:3b:27:08:c4:75:58:37:
db:67:20:ca:64:65:ef:78:de:55:8c:ec:5c:7b:e8:
5e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133466
sbgp-ipAddrBlock: critical
IPv4:
45.112.36.0/22
103.4.124.0/22
IPv6:
2401:d00::/32
Signature Algorithm: sha256WithRSAEncryption
2f:22:4c:41:fb:67:57:8a:56:90:ff:16:b3:db:13:3d:61:50:
b0:2b:84:e3:1c:c3:10:27:d8:2e:5c:2f:c6:a4:c9:57:e4:73:
06:ec:3c:ea:22:8d:76:35:90:02:c2:0b:e3:b4:13:08:5e:f5:
61:57:6f:fb:bf:4b:83:cb:db:54:fc:7d:5f:7a:8b:85:51:6e:
83:11:b3:43:5a:fc:30:92:02:f9:8b:fa:a7:a3:c0:2e:6c:11:
e1:03:de:98:93:53:f7:3f:99:47:d2:6f:78:d9:9c:b5:e3:e8:
9e:c3:0f:04:5a:7e:88:eb:38:21:e1:e6:ad:1b:17:7d:a8:09:
92:70:8d:60:82:ef:32:66:8c:60:81:14:54:30:90:55:ec:18:
76:01:f6:e7:71:cc:54:d0:44:2b:27:1f:bf:4c:36:75:90:2b:
ba:fa:f7:1c:c9:74:2b:76:ed:c5:29:f7:f3:23:8b:43:f3:73:
91:66:1d:b7:21:4c:65:eb:91:ad:41:a5:d2:57:98:02:80:53:
62:de:00:3c:56:ce:bf:b2:9e:e5:35:82:d0:22:be:ac:ca:d8:
34:22:e4:8b:4e:5d:f5:31:46:2f:7f:88:8b:33:a8:03:c8:ea:
06:4a:d5:81:c8:b9:5e:35:8d:f6:88:af:58:0c:ed:2c:41:a0:
f4:e4:39:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:37:10 2025 by rpki-client