Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
File: KTvwacT02DHu52nVsTnjAh2zSwA.cer (raw, json)
Hash identifier: w78SSM2b+qfGlBaMCjPH407AmPT9PER3iSxO6uyMQwI=
Subject key identifier: 29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02589A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 29 Jul 2025 06:21:24 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: IP: 203.8.2.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153754 (0x2589a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 29 06:21:24 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91CE65A, serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:16:02:b5:f0:4d:18:ac:7e:24:00:45:2f:
40:8e:60:eb:5c:6c:de:40:4e:4e:26:d1:6d:79:27:
5a:c8:bc:70:9a:b8:f6:ca:35:83:3b:f5:1d:78:d8:
18:1b:14:7b:4e:95:71:1c:31:c2:7d:e5:2c:99:e4:
b9:c7:5e:9f:21:ac:45:de:f4:e9:44:7d:1e:75:39:
5f:b4:60:34:90:c5:98:95:f5:d5:5a:1f:04:ea:a8:
d7:31:55:d8:48:fb:7b:e1:18:e2:e0:81:b7:8a:17:
be:c5:20:37:45:2a:3d:33:e6:90:d0:af:ca:68:6d:
e5:75:5e:11:34:8b:17:e6:17:49:a1:7b:b2:11:28:
35:5e:ba:f4:ec:c6:43:93:d2:2f:c3:22:c9:2e:94:
67:8e:74:0f:9b:a8:55:e4:ec:54:7c:ac:8a:4b:27:
c9:e5:bc:7d:4b:39:2d:2b:ce:5e:08:f3:3f:35:e7:
34:49:69:3a:e4:1e:a9:b1:be:50:e9:67:2f:b5:f3:
17:11:a9:6d:c7:a9:f1:64:98:3d:9f:1a:f0:39:08:
ae:e8:f2:9b:19:01:db:2c:09:87:11:96:30:2a:72:
c2:40:ff:3d:03:af:3f:7d:1e:68:0d:04:7c:53:7e:
37:81:56:13:ba:bc:28:85:e1:a4:45:85:12:49:56:
f4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.8.2.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:92:a4:05:4e:57:c2:bb:e8:f7:1f:0c:1d:36:0c:19:ae:b3:
08:84:09:f3:49:ad:e6:0c:ed:6a:8b:73:ca:24:d5:a1:9d:f7:
63:72:ee:26:a1:5a:5e:91:35:8b:fe:87:ba:d9:5b:f3:ed:83:
a2:7f:3e:99:d8:9a:de:b9:60:0c:05:f0:f0:a8:36:66:68:48:
19:24:31:f4:77:9c:08:12:10:bc:26:53:ef:f6:ca:7c:23:97:
d0:f4:a0:df:9d:85:61:12:0c:2c:8f:d6:df:b2:71:5e:83:19:
2e:ab:53:ce:d4:ec:7b:8f:26:a5:b9:ac:2c:83:09:42:52:a8:
62:be:c2:15:f7:c1:9d:c3:03:bd:29:7a:76:43:bf:ea:2b:67:
5e:d5:31:7e:3a:92:bb:2d:9b:df:2b:3c:bd:90:99:b2:6e:e3:
87:bd:8c:c9:82:34:c1:d2:ad:fd:5e:95:b8:71:55:74:2c:56:
dc:52:92:95:ce:34:57:69:9a:60:e5:9a:4a:0a:8d:90:b5:1e:
85:05:be:07:03:64:d9:d4:2b:fb:f8:bd:c2:5e:36:fb:fc:5e:
39:cb:c4:13:5f:e5:73:43:1e:64:cc:6c:71:52:55:f6:6a:2e:
c1:39:55:72:cb:56:72:88:f0:6b:48:89:1f:51:cd:a4:6c:64:
73:80:33:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:07:15 2025 by rpki-client