Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LGfSFpazocG8LOSfy-CnpTo306Y.cer
File: LGfSFpazocG8LOSfy-CnpTo306Y.cer (raw, json)
Hash identifier: ittwvu5w8yozv66vTmrxB8zMsHWaKSPenhojMYi5eIQ=
Subject key identifier: 2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025891
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 29 Jul 2025 00:12:14 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 133190
AS: 154096
IP: 163.61.248.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153745 (0x25891)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 29 00:12:14 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9168221, serialNumber=2C67D21696B3A1C1BC2CE49FCBE0A7A53A37D3A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:91:52:8a:db:64:49:d7:66:60:9e:52:db:
71:0e:2e:34:14:0a:e2:ca:56:5b:be:3d:bc:29:c3:
da:9a:e2:e4:2d:af:a4:cd:82:d4:98:58:89:cd:7b:
76:35:52:ef:89:0c:0c:66:bd:d7:2f:1b:de:e5:c4:
4a:45:76:fa:a7:0d:43:73:55:99:cb:8a:46:a1:e9:
a7:ab:96:eb:68:e5:30:fa:a0:ae:ea:e8:c6:f1:f2:
e2:13:b9:76:30:e3:e7:42:ad:5b:f6:d7:4a:46:e6:
0f:28:86:aa:75:8f:fc:03:f6:a5:07:56:5d:6f:b6:
29:1f:81:17:94:ac:16:3d:78:ce:62:34:f2:73:eb:
13:38:61:4f:82:75:6f:49:47:38:98:5c:79:52:6d:
ce:49:90:42:59:4e:b9:4a:ec:a2:44:88:13:e1:c7:
33:46:1c:99:0c:ce:4d:b3:30:59:45:31:d0:55:61:
b2:ee:78:62:5c:73:48:e4:be:f5:78:bf:73:69:09:
3f:fd:72:7b:f7:b0:77:79:a6:b5:06:92:8c:3d:b5:
d4:eb:ba:30:f3:85:0b:80:bc:cc:1c:42:07:44:40:
9e:9e:6b:4b:d1:e2:7e:76:37:55:f7:82:5a:f9:53:
6f:82:b4:4e:e7:84:97:72:91:d0:94:ba:9f:6a:44:
1b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:67:D2:16:96:B3:A1:C1:BC:2C:E4:9F:CB:E0:A7:A5:3A:37:D3:A6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9168221/33535CB0654C11F08B39E71CC4F9AE02/LGfSFpazocG8LOSfy-CnpTo306Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133190
154096
sbgp-ipAddrBlock: critical
IPv4:
163.61.248.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:b2:69:8f:30:31:46:4a:b2:70:a1:d0:b5:61:32:2d:29:ff:
5e:54:5d:54:de:c4:07:6b:b5:86:22:1f:d2:35:e0:bf:8f:94:
a6:0d:e8:12:fa:b8:d4:91:d5:56:d1:3f:1c:73:f8:cc:54:2d:
36:80:32:3c:ce:de:97:33:cc:f5:10:c8:a6:1e:ff:bb:f6:a4:
0b:e9:d1:b8:19:b1:2b:25:32:e9:af:0f:91:39:10:5d:32:28:
2b:6c:8b:9b:02:9f:64:80:ad:d7:5f:23:85:57:c7:07:6d:62:
45:2a:b4:76:db:48:6a:f5:df:41:80:3a:70:41:66:ca:12:8f:
a5:c0:bb:9d:27:6e:29:bd:93:6a:9a:50:d9:a1:04:d2:1d:a2:
3b:01:ad:78:70:53:cf:35:e9:b3:3e:86:0a:9c:c9:ef:f4:ce:
3b:6d:53:13:50:f7:da:73:1b:c4:cf:6d:9c:e7:c1:8a:34:5f:
c2:19:f2:b4:3d:ce:d3:8b:c4:31:f6:89:67:9e:c9:51:b7:c8:
6d:c8:e2:2a:6d:f2:fb:c4:5d:0e:83:d2:e5:15:3b:2f:7e:43:
7f:05:4f:fb:fc:d4:8e:5e:bf:fc:aa:94:e6:7d:25:95:81:49:
d6:93:52:84:6d:ac:e3:e9:5a:27:c6:25:68:07:63:e8:75:f2:
c8:e4:14:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:44:18 2025 by rpki-client