Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer
File: EdV6dX7VZXXQSeQpyOxzelYFC3k.cer (raw, json)
Hash identifier: L07s5ImMNbqtLV8aq/RzEK+BmR3xw+zCNYXCgwQI1/U=
Subject key identifier: 11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023B0F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 31 Mar 2025 17:17:19 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 56123
IP: 115.124.8.0/21
IP: 2407:a200::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146191 (0x23b0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 31 17:17:19 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91672F2, serialNumber=11D57A757ED56575D049E429C8EC737A56050B79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f3:b9:a2:e3:4c:1e:a1:33:94:8a:3a:42:07:
4b:f2:24:24:ed:c8:bf:d8:38:b1:c5:83:00:8b:fc:
f2:c5:26:18:32:a2:c8:29:81:d6:25:49:4a:b2:ed:
cf:a9:f6:7c:f3:9b:71:3c:7e:e0:97:d7:3c:57:2b:
9d:05:34:02:db:d7:be:8a:57:63:2f:0f:03:f5:19:
9d:76:06:40:80:f5:64:7d:52:42:41:eb:0f:6b:16:
a2:7f:27:7f:a8:ba:e6:7b:19:36:dc:44:70:91:93:
ee:61:93:10:a9:fa:ac:cc:57:6c:a9:d5:40:0f:be:
10:93:bb:da:96:6d:45:32:90:61:46:9e:4c:3b:79:
c6:ca:55:22:e6:37:b3:8d:8d:4c:03:1e:45:cb:56:
9b:f6:dd:cb:ec:e4:f3:9f:93:1d:d0:5f:87:1a:86:
7f:ef:28:da:e4:07:93:0d:9a:e9:39:0e:7b:17:3c:
71:6f:6b:02:6b:9b:6c:7c:df:03:68:fc:cb:be:8f:
19:2b:f2:a1:01:07:4b:73:d8:0a:8e:d7:89:6c:bf:
fc:54:bc:4b:0a:0b:c2:ff:4a:66:fd:31:7c:5a:d4:
8a:e2:0a:c5:0f:7f:64:e1:c9:03:ab:d2:1e:78:4c:
65:08:23:4c:a2:28:30:cc:55:99:71:1b:79:07:3e:
57:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56123
sbgp-ipAddrBlock: critical
IPv4:
115.124.8.0/21
IPv6:
2407:a200::/32
Signature Algorithm: sha256WithRSAEncryption
94:30:aa:21:e2:aa:26:5c:c8:c4:7e:63:3c:a7:5d:fd:ac:43:
eb:c7:bf:fa:2a:50:99:3c:3a:ba:f5:65:8e:c1:38:6b:4a:e7:
75:eb:ea:6b:98:84:a8:2e:0e:93:76:c9:04:3d:d2:a7:20:74:
a2:bd:7f:08:5e:23:62:ab:91:09:c6:c4:2c:a6:9b:3f:8c:fe:
33:ff:db:3b:2b:c6:9d:ab:71:52:92:0b:22:62:ef:09:31:41:
70:cf:4b:05:bb:33:5e:85:3c:bb:32:db:f5:9c:40:5f:b2:69:
fe:9a:18:59:54:05:db:06:6b:e0:8f:55:37:61:9c:5b:38:83:
36:88:da:7f:c1:35:64:4e:97:39:91:72:57:b4:1f:59:97:64:
0a:d0:32:a7:f2:f7:f7:71:09:52:96:86:a6:16:96:68:0f:4f:
4f:cd:a5:3e:79:77:a8:7a:88:d5:fc:0a:04:98:df:97:e0:c3:
c0:bb:df:6c:90:27:34:ac:30:f8:ff:27:f4:2b:e8:49:cf:31:
6a:be:1c:84:8f:e4:7f:95:3c:dc:5e:98:c2:b8:f3:7d:aa:05:
74:4e:f5:76:20:e4:6c:8c:89:c0:c2:41:ad:36:f9:4c:90:a8:
13:ba:cc:ea:02:c0:7c:ec:d2:e8:9e:d1:39:14:f2:cf:ad:91:
6d:91:4f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:49:04 2025 by rpki-client