Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer
File: LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer (raw, json)
Hash identifier: T7u2bPDIisVFuYo1BzzZIONOzbviDzOvnJNw9Nk1638=
Subject key identifier: 2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024944
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 28 May 2025 14:57:44 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 137816
IP: 103.114.192.0/22
IP: 2402:d1c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149828 (0x24944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 28 14:57:44 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A9153D75, serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:c2:88:11:55:d0:94:9d:69:a3:e3:cb:22:
65:ec:4b:b7:89:91:d7:46:a0:72:60:e0:5c:3d:32:
02:17:a0:6a:a0:1d:6d:be:d3:68:3b:a8:3c:4e:c7:
70:5d:d5:8c:9b:97:38:e3:a1:ed:43:af:ed:c3:89:
76:2a:34:bd:5a:9d:75:c4:27:2b:3e:98:95:8c:b4:
33:3d:67:e1:19:97:99:0a:fd:f2:5a:9e:3c:cd:68:
21:2a:8d:50:3f:70:54:79:42:62:ba:0f:17:bb:29:
e5:34:32:b3:cd:20:85:84:14:04:49:4a:83:e9:ed:
50:57:97:85:58:10:6b:9f:7e:3b:e8:f0:26:a2:fd:
eb:e3:06:0a:2c:2d:57:7d:9f:2a:82:71:83:42:f7:
12:ae:04:8b:14:55:29:a2:cb:c6:b9:b1:f9:64:96:
4d:d8:f6:34:a0:4b:a6:41:c1:cb:4f:85:50:08:63:
7c:29:1e:3c:84:96:6f:0e:97:fa:0b:97:98:7b:eb:
d6:10:6b:c4:74:0c:c2:05:ed:df:29:2e:50:bf:5b:
cb:83:8a:b4:0c:ff:cf:0c:d1:4c:f2:4b:24:0d:7a:
52:d2:93:7e:a8:b8:97:ab:09:44:29:d8:1c:e5:87:
9a:d4:ab:12:3a:c3:1f:0a:6c:28:e6:e7:b4:3a:c2:
c9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137816
sbgp-ipAddrBlock: critical
IPv4:
103.114.192.0/22
IPv6:
2402:d1c0::/32
Signature Algorithm: sha256WithRSAEncryption
70:9a:a8:aa:51:b6:0f:70:25:0c:85:c6:f6:42:e6:15:f0:13:
db:9d:0b:ca:12:12:19:2b:e6:71:f9:d6:04:81:f3:5a:b6:2c:
f5:b8:6c:d8:16:30:9a:61:f0:3f:95:91:26:00:a0:4a:83:36:
f4:59:d5:09:e0:09:26:a5:fd:04:af:eb:dc:d7:31:1e:1f:58:
6d:47:49:1b:1f:c9:6c:1d:fe:a9:dc:5e:9d:28:f7:60:bf:12:
47:35:03:9b:61:1c:ac:6c:43:f4:1a:a5:69:ab:16:ae:ea:55:
5a:df:32:38:f1:63:cb:bc:23:9c:33:b4:65:01:0c:a4:21:46:
e6:48:e5:5b:10:4d:34:49:44:a7:e6:19:64:13:56:8b:4d:e5:
f1:ea:70:cb:af:7a:7b:eb:2f:62:28:27:6b:85:cf:69:67:34:
f9:b9:29:a2:f7:48:c9:27:bd:41:8d:38:35:d2:a3:b5:b2:e0:
9c:7f:16:b8:72:11:7f:0e:f3:7a:36:d6:c1:a1:c1:a3:7d:30:
58:cd:f9:0e:09:33:fb:e5:1d:ff:c6:8f:79:40:95:31:e5:f6:
8a:36:6d:55:12:10:de:1c:87:ed:4b:a6:8d:bd:94:27:71:03:
b2:9a:ad:ec:64:5f:66:ae:83:f6:b6:2c:7a:b9:d1:23:dc:4d:
67:a2:ed:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:32:25 2025 by rpki-client