Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer
File: JMzoDfDUim0MORo68N1kTdv7das.cer (raw, json)
Hash identifier: eAEyFmuGcKeEb0B3I2jer565ceAB+VMEgrgKF/t/vwU=
Subject key identifier: 24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024B5F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Jun 2025 20:38:21 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 149811
IP: 103.186.242.0/23
IP: 2400:7660::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150367 (0x24b5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 2 20:38:21 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A918769B, serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:8f:b4:46:90:2f:91:4d:b7:22:87:f1:7f:
dd:ac:bd:e0:7a:75:50:84:b7:c7:e4:8b:54:21:c2:
32:e1:e3:9e:63:d2:fd:6d:ca:5d:3e:d2:73:9e:98:
02:38:f9:28:20:2a:d1:51:18:57:7d:75:be:dd:77:
6f:d6:49:d6:7b:62:8f:4a:05:a6:a0:fc:cc:e7:dd:
91:0a:a5:f9:53:66:dc:4d:cd:da:74:14:5a:f6:66:
e7:99:f0:a7:c0:05:16:fc:db:8c:fe:8e:40:7f:99:
6d:6f:5e:64:a2:e8:8f:81:c6:63:98:37:a6:f7:c3:
c0:97:75:2f:33:ba:60:6a:21:4e:e1:ce:71:f3:3a:
eb:f8:8a:4e:03:a4:ec:4a:04:91:ee:b4:36:97:e5:
61:76:7b:0b:d6:45:b0:b1:75:a1:1c:8a:07:ff:69:
2b:c7:ab:fc:38:e2:6a:de:16:21:57:bc:b9:de:d0:
36:e5:31:c1:ce:fc:79:16:89:40:64:96:a5:32:d5:
6c:5f:c1:99:2e:ea:94:54:1b:a8:26:2c:94:d8:ea:
3d:ea:57:dd:32:59:97:bd:8c:18:d6:7a:79:5c:fb:
e4:b3:26:4d:0b:ba:9f:c8:28:55:27:6f:da:cc:a3:
e3:67:46:5a:20:45:e8:2f:92:a4:f2:92:14:f6:62:
77:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149811
sbgp-ipAddrBlock: critical
IPv4:
103.186.242.0/23
IPv6:
2400:7660::/32
Signature Algorithm: sha256WithRSAEncryption
79:5b:8f:3b:fb:ab:b8:c8:2f:85:7d:8f:b5:a8:78:8a:1b:09:
00:ab:a6:51:6a:04:f7:f6:46:a9:30:b6:e1:ca:0e:5a:14:fc:
3d:09:3a:51:62:92:d9:59:f6:bf:47:ac:04:a6:94:32:12:0d:
e7:7e:63:e6:21:e3:7e:22:69:4e:af:7b:e9:8d:c3:87:d0:2c:
9a:ec:71:1d:1d:9a:50:5c:7d:a9:fd:0c:0b:66:8f:85:38:54:
94:05:16:cd:02:a8:c6:62:98:84:81:9e:98:4d:61:1f:41:2f:
99:da:cf:3d:34:09:9f:b8:64:3f:8e:34:15:18:49:18:da:85:
9f:1c:c2:96:05:71:23:6d:5b:6c:d5:d2:3c:98:74:1a:ce:0e:
72:4b:b9:e6:98:0c:c6:94:5d:db:de:43:e0:9e:9b:6e:22:14:
31:ba:b4:b4:6b:9d:dc:e6:f6:9d:b1:9d:2f:25:27:61:64:f4:
b1:0d:bd:1c:f2:c6:fc:e5:de:3e:b7:05:cd:3d:2f:4d:a7:8a:
5e:a1:c5:a1:96:ac:bf:77:f5:d9:bb:5e:f6:20:3a:6e:fe:09:
fe:ab:c2:6d:d2:30:0b:5a:62:b0:43:73:ae:b1:8f:b3:b1:83:
47:b9:cf:64:24:a7:a6:b9:76:6c:b9:9a:75:fe:de:9d:a1:32:
b2:ab:93:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 04:27:59 2025 by rpki-client