Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer
File: CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer (raw, json)
Hash identifier: 6fJ9O1739tX0VrGUNbn6s4kULB254ds/LxftoEbUAqI=
Subject key identifier: 08:4C:FA:9E:BC:06:C0:D6:81:05:48:B0:ED:1C:C4:7C:F8:EE:0F:31
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025B65
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 Aug 2025 19:57:22 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 2405:fe80::/32
Validation: Failed, certificate revoked on Wed 06 Aug 2025 23:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154469 (0x25b65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 5 19:57:22 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91E46E8, serialNumber=084CFA9EBC06C0D6810548B0ED1CC47CF8EE0F31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:52:ab:a8:bd:0b:bd:5f:84:6c:a2:44:f5:bd:
b8:87:5d:23:90:2e:41:db:43:f7:55:e4:fb:48:10:
7b:e1:0d:a1:5f:17:db:0a:01:30:8e:02:6f:98:5d:
8d:48:eb:ba:e7:06:cb:90:89:1d:62:4c:1e:5e:f3:
bb:0d:3f:85:2d:8b:5d:e8:e4:b7:9b:62:e8:b2:69:
32:9c:9b:b3:04:cd:24:b4:7b:03:71:cb:44:dc:9d:
7b:81:58:ae:cb:de:55:91:e3:60:7e:75:73:5c:3d:
6d:c8:2f:bf:d7:25:05:5d:b6:1a:98:50:6d:43:75:
dd:97:36:d0:c4:03:5b:e2:7c:c5:1b:48:ac:41:16:
aa:f8:98:49:b7:e7:48:3d:b2:1e:d9:0c:8c:26:e3:
59:72:58:04:d5:c5:49:07:73:0c:6e:85:41:14:36:
90:21:46:82:ad:a5:d6:d7:d6:bb:4e:8f:93:7f:5a:
0e:67:fc:4d:b4:af:8b:73:45:fb:b3:31:dd:68:7b:
6c:ac:ee:81:15:25:df:53:52:bc:bc:01:12:70:09:
bc:4f:24:4e:64:cd:62:e2:4e:f4:b2:d1:af:02:33:
d0:00:a1:34:52:f4:10:62:b3:07:28:3b:21:7d:72:
bc:1f:7f:66:59:77:f5:fa:f1:2f:2f:74:4d:9f:a0:
79:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4C:FA:9E:BC:06:C0:D6:81:05:48:B0:ED:1C:C4:7C:F8:EE:0F:31
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:fe80::/32
Signature Algorithm: sha256WithRSAEncryption
2d:17:db:fc:89:75:e2:4a:98:a3:4f:71:af:1e:05:23:53:3a:
c2:c9:2b:aa:cd:49:c0:03:c2:64:1c:2e:0c:b7:53:d6:34:71:
81:2c:8e:9f:36:24:8c:8a:e6:fb:59:33:a6:ed:0e:eb:e8:66:
ed:50:cb:9f:db:bb:12:88:c1:78:53:a2:0a:d0:27:73:9d:04:
77:80:1a:b5:70:24:5f:ce:4e:be:e7:c9:0a:5b:ed:e9:74:c0:
16:fa:26:54:2e:57:fc:44:6b:45:fa:b4:d7:fc:3e:97:b6:a0:
83:0e:4f:a9:f8:85:11:c5:c2:43:68:b8:f1:6a:6a:4b:c2:59:
65:34:71:1c:37:d1:1b:f3:6c:6b:d4:07:c0:13:0b:24:3f:3c:
5d:63:9e:fe:ff:12:56:40:af:8f:80:e6:6d:d1:fd:08:4c:bd:
dd:48:8e:51:f9:78:29:d9:5d:4b:51:0a:77:07:d3:70:c9:ba:
cf:2f:b0:7b:69:77:9f:28:78:a9:97:35:ec:db:de:a4:fa:d7:
73:22:c9:41:4c:0b:e5:67:dc:90:0d:a6:54:38:58:9a:f5:ae:
36:dd:c4:8b:6d:ba:7d:be:a1:06:46:99:0a:55:6e:76:66:38:
0c:28:e0:9e:c6:f9:aa:28:bd:a8:ea:b2:a6:b8:3c:84:af:08:
3d:b5:b2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:55:16 2025 by rpki-client