Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
File: M1EvnGdsMJ4181WPA7muZBm_dBU.cer (raw, json)
Hash identifier: B4N2ixrlnE1aA1iKF1+5iWPKgQ+g2Rfm5ue5ROfX/iY=
Subject key identifier: 33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024CE3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 06 Jun 2025 19:28:49 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 103.69.78.0/23
IP: 2400:f960::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Jun 2025 22:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150755 (0x24ce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 6 19:28:49 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91CB763, serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6c:d6:03:ad:68:c8:5a:be:94:e5:f4:b5:80:
81:aa:2f:c2:37:ba:45:8c:60:8f:70:4c:dc:83:dc:
12:d7:29:ea:9e:d1:39:9a:3e:ec:47:83:f6:ee:ea:
c9:0a:7e:ae:a3:85:42:b3:d0:5d:e4:e3:50:1f:84:
da:09:6a:a7:b2:5b:37:b5:59:d1:32:50:3f:57:31:
10:dd:be:cd:da:29:46:33:f3:ed:53:35:db:2a:fb:
64:fb:9d:c5:b1:4e:38:c1:c0:8f:c2:42:dd:4b:3d:
b5:74:37:f0:e9:43:30:c3:0a:da:5c:c5:c1:90:80:
02:31:01:45:66:b7:77:a3:5e:64:d5:da:c1:eb:80:
64:33:f2:d4:5f:06:89:2f:cf:39:03:87:05:0f:74:
4b:6a:d5:87:c8:8f:45:9e:68:f3:a8:1b:4b:d0:0d:
1b:a4:34:b6:7e:8d:8c:7a:4d:70:5c:27:65:0e:97:
82:58:6f:c4:15:5a:3c:ca:6b:b9:2e:06:f5:f4:0f:
84:82:5b:85:26:e0:a5:cc:b2:ac:ab:dd:e9:77:b1:
bf:11:a0:6b:13:75:97:28:f8:62:7d:76:f8:65:8e:
76:41:18:e1:5a:f1:e4:81:7e:bf:28:1e:33:b8:75:
13:89:71:5a:fc:85:a6:58:26:d8:96:ee:5a:2b:14:
8e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.78.0/23
IPv6:
2400:f960::/32
Signature Algorithm: sha256WithRSAEncryption
68:eb:20:d3:a1:2c:04:9d:b1:a5:a5:f8:9c:2e:5d:47:34:df:
da:6d:a7:4f:32:63:02:4c:eb:2e:7a:1a:39:62:45:3b:71:ff:
6b:ed:43:f9:08:d0:18:88:23:5a:6c:cf:a1:ac:4d:a6:91:58:
06:68:66:5a:75:a1:fd:e7:0c:33:2b:9f:92:28:19:93:bd:71:
95:5a:5f:51:22:6b:fc:be:65:c3:92:c1:5f:64:f4:55:10:7d:
6d:cb:4b:0c:c4:76:e5:fa:1f:d8:44:db:49:d1:62:62:be:33:
a7:b1:4b:f6:d8:e2:5e:72:17:c6:17:89:f8:d2:b5:d5:a7:84:
22:53:a0:dc:65:1b:fe:12:a7:0d:d9:6d:17:b6:ca:51:56:54:
93:ad:da:90:79:b8:75:ca:bb:43:13:61:b6:b4:f0:03:df:e1:
19:4b:69:26:a0:f0:bb:b1:de:96:7b:4f:49:99:57:22:ad:42:
6e:5d:9e:41:f2:88:b9:66:94:0d:85:6c:bb:a0:ab:1e:01:36:
b7:23:eb:df:71:d1:dc:5c:3b:12:d8:98:b0:0f:bc:b7:f6:a9:
18:65:59:d4:9f:67:a5:f0:87:a7:df:8a:da:4f:42:5c:aa:f6:
c4:76:87:cf:71:e7:e2:54:f6:96:25:7b:54:af:65:10:ad:e0:
1b:04:9b:0a
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgIDAkzjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDYwNjE5Mjg0OVoXDTI2MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQ0I3NjMxMTAvBgNVBAUTKDMzNTEyRjlDNjc2QzMwOUUzNUYzNTU4
RjAzQjlBRTY0MTlCRjc0MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDRbNYDrWjIWr6U5fS1gIGqL8I3ukWMYI9wTNyD3BLXKeqe0TmaPuxHg/bu6skK
fq6jhUKz0F3k41AfhNoJaqeyWze1WdEyUD9XMRDdvs3aKUYz8+1TNdsq+2T7ncWx
TjjBwI/CQt1LPbV0N/DpQzDDCtpcxcGQgAIxAUVmt3ejXmTV2sHrgGQz8tRfBokv
zzkDhwUPdEtq1YfIj0WeaPOoG0vQDRukNLZ+jYx6TXBcJ2UOl4JYb8QVWjzKa7ku
BvX0D4SCW4Um4KXMsqyr3el3sb8RoGsTdZco+GJ9dvhljnZBGOFa8eSBfr8oHjO4
dROJcVr8haZYJtiW7lorFI7TAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUM1EvnGds
MJ4181WPA7muZBm/dBUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNCNzYzLzhGMDIxRjg4RTlBNzExRURCMUM2QjE0MUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDQjc2My84RjAyMUY4OEU5QTcxMUVEQjFDNkIxNDFDNEY5QUUwMi9NMUV2bkdk
c01KNDE4MVdQQTdtdVpCbV9kQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd
MAwEAgABMAYDBAFnRU4wDQQCAAIwBwMFACQA+WAwDQYJKoZIhvcNAQELBQADggEB
AGjrINOhLASdsaWl+JwuXUc039ptp08yYwJM6y56GjliRTtx/2vtQ/kI0BiII1ps
z6GsTaaRWAZoZlp1of3nDDMrn5IoGZO9cZVaX1Eia/y+ZcOSwV9k9FUQfW3LSwzE
duX6H9hE20nRYmK+M6exS/bY4l5yF8YXifjStdWnhCJToNxlG/4Spw3ZbRe2ylFW
VJOt2pB5uHXKu0MTYba08APf4RlLaSag8Lux3pZ7T0mZVyKtQm5dnkHyiLlmlA2F
bLugqx4BNrcj699x0dxcOxLYmLAPvLf2qRhlWdSfZ6Xwh6ffitpPQlyq9sR2h89x
5+JU9pYle1SvZRCt4BsEmwo=
-----END CERTIFICATE-----
Generated at Sat Jun 14 04:21:25 2025 by rpki-client