Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer
File: HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer (raw, json)
Hash identifier: Ydyb1rFj4X2tVdkKWQzQZDWe2sT7Dshdj2LOiwDqMrQ=
Subject key identifier: 1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0246C7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 16 May 2025 16:54:41 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 23900
IP: 202.136.240.0/21
IP: 2404:c200::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149191 (0x246c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 16 16:54:41 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A918742C, serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:ed:f1:8a:c5:6f:df:d5:92:1b:d6:ff:3d:
21:a6:aa:5d:43:10:15:63:87:f0:ec:37:b6:51:9d:
22:d7:20:d7:cb:16:fe:7e:2e:e1:fe:66:35:8f:e3:
63:b4:b3:ff:f4:2a:24:4f:49:32:0f:a6:b1:1c:df:
9d:e4:b4:22:75:e1:82:64:da:91:7b:9c:63:6c:b8:
7b:70:ad:c3:46:40:eb:17:bb:1a:b4:29:78:77:29:
c0:b9:21:ec:8e:6e:9f:94:e0:77:72:d4:62:87:91:
dd:57:25:84:2a:7a:39:54:e5:b8:7a:eb:38:de:8e:
36:f5:98:8e:48:24:0d:01:bd:02:4f:7b:16:4b:eb:
db:86:83:91:21:7d:36:25:a6:82:e8:7b:75:63:c6:
dd:b1:ac:14:05:01:d4:a1:fb:f7:a3:b9:0d:c2:b9:
e5:d6:9f:aa:49:d6:b1:89:31:83:99:7e:f4:19:3d:
32:50:8f:9a:5e:1b:b2:3c:9b:3f:d6:1a:67:58:4d:
69:51:b5:2c:13:eb:d8:ad:2a:ff:b6:d7:11:a5:1b:
78:89:fd:ac:06:1e:2a:7e:7e:cb:4e:82:28:de:19:
7d:6a:67:8d:c4:f0:d3:d3:9e:69:6a:18:7f:39:27:
a5:63:3f:4c:14:c5:2f:f0:2b:c5:ac:a6:31:ab:83:
be:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23900
sbgp-ipAddrBlock: critical
IPv4:
202.136.240.0/21
IPv6:
2404:c200::/32
Signature Algorithm: sha256WithRSAEncryption
85:19:50:4b:62:a5:ac:a0:87:94:c3:d9:ec:f6:0b:0f:8d:03:
10:c7:3b:ec:e3:43:a0:ea:1d:e9:bf:9d:96:ab:4f:9f:6b:c2:
7b:f4:70:50:82:ba:8f:7e:41:d1:ce:d1:6b:8a:3b:8b:c3:67:
e1:47:f4:5c:57:c5:c5:f3:5d:a1:62:b3:fb:f8:f8:94:71:aa:
6e:86:68:dc:d4:cc:61:a0:e4:75:e0:b0:5e:7f:87:e9:0a:1d:
a7:1a:9a:dc:02:15:2c:78:b8:1b:36:18:ff:f9:4c:62:6f:fa:
9e:60:13:15:0b:6b:f0:39:8f:72:d9:21:44:56:5b:de:bf:d4:
a1:f6:ef:a4:5a:77:7a:75:d1:b6:ef:b0:eb:a1:c7:fa:7b:1e:
9f:24:ec:a6:1b:11:cb:15:b5:b8:bd:6e:48:24:76:67:90:cb:
df:5c:ab:44:5e:44:37:20:52:34:b7:60:86:c8:94:d9:55:df:
ff:45:43:31:43:38:c9:d5:39:20:1d:7f:a8:63:be:9a:ee:ed:
bd:1f:59:5c:3a:cd:71:23:19:4c:f4:54:2a:bb:a7:27:d6:1a:
2c:e1:b1:5a:22:5f:20:f7:2a:35:b7:fa:19:31:07:0e:21:d1:
5b:5a:70:ac:03:3e:0a:d3:fc:a8:3b:2f:1d:eb:15:26:19:2b:
c4:24:bf:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:49:56 2025 by rpki-client