Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
File: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer (raw, json)
Hash identifier: 1AB2i4X6pzm2YLTSbkLJPqxC7FmB2HnMMZqEo3fuNrU=
Subject key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024CCE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 06 Jun 2025 13:42:24 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 10226
AS: 24566
IP: 43.252.244.0/22
IP: 101.78.8.0/21
IP: 103.13.88.0/22
IP: 114.129.24.0/21
IP: 202.62.96.0/20
IP: 2404:2e00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150734 (0x24cce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 6 13:42:24 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A912FAB9, serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:8e:8d:b8:f5:5a:3e:d8:08:e2:d5:5d:f4:
2d:77:88:2c:4e:9a:20:24:ec:12:aa:e6:78:c7:13:
ae:16:a7:19:d8:ea:c1:c1:4e:2d:92:62:96:a9:2f:
9b:0f:a5:28:24:ab:83:86:ef:a5:72:e8:50:38:5b:
46:91:c5:4d:05:f2:2b:6e:32:c0:d2:14:29:61:aa:
64:85:1f:66:93:b8:2c:a0:d0:d6:48:e0:97:1c:0d:
03:3d:dc:22:d6:a5:8c:6e:83:4a:28:41:ea:51:14:
4d:e0:5c:7e:23:29:69:52:b8:45:e6:54:1b:9d:a4:
c0:d1:74:4d:c0:f7:c6:72:16:fe:4b:aa:c5:95:22:
8c:12:8d:a7:93:e2:65:30:58:6b:48:3f:17:8d:9f:
35:08:d7:97:22:9a:5b:99:6d:83:8d:59:e1:92:ef:
7d:c5:47:48:17:b1:bd:0d:3e:78:be:07:43:a8:f1:
a7:cc:28:27:1c:9d:b2:0f:f8:00:cd:c5:d2:cc:06:
00:3f:53:dc:fb:af:69:8f:ad:d2:74:2e:ea:f2:30:
30:e3:86:b3:af:54:23:20:56:8f:b3:62:f5:be:d6:
3f:b6:fe:86:8a:b2:af:f5:b0:6a:d6:b5:84:8c:bd:
36:07:ec:e8:98:79:16:84:62:7b:71:2c:8e:83:df:
19:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10226
24566
sbgp-ipAddrBlock: critical
IPv4:
43.252.244.0/22
101.78.8.0/21
103.13.88.0/22
114.129.24.0/21
202.62.96.0/20
IPv6:
2404:2e00::/32
Signature Algorithm: sha256WithRSAEncryption
4e:f8:a8:15:ba:1d:11:4f:98:8d:ac:86:b2:ff:29:36:0a:d1:
bd:01:23:75:e8:37:11:2a:9b:98:34:f5:3a:55:55:2f:b8:a6:
03:99:c6:49:32:fb:da:d0:92:a1:0c:fa:f2:9a:c0:c5:a4:26:
38:15:54:7f:c7:85:09:c6:7c:3e:cf:72:8d:be:67:b4:3c:7e:
f2:76:13:bb:01:4e:03:b1:09:a6:9f:82:f4:b7:b0:14:18:6e:
bb:a3:46:36:b0:3a:5a:46:2e:18:77:0e:99:42:0a:3d:67:6f:
33:37:f5:dd:24:eb:74:30:60:1e:e5:81:52:77:26:f6:60:15:
7d:d1:88:d2:64:28:60:af:6d:d7:43:b5:3d:28:a6:fc:19:d0:
d7:4b:7a:7c:fd:ca:5e:a8:b5:a2:6d:2a:25:2a:5b:0c:40:f9:
d1:d0:84:01:01:cb:4c:6e:a0:e8:63:71:9f:81:dd:48:80:12:
97:0d:e8:87:bd:f9:2a:96:15:38:7e:08:20:a5:c4:ed:f4:bc:
42:c5:cb:a5:68:bf:9d:f3:89:4a:d5:bc:a2:fe:b5:fe:4a:8b:
da:38:ce:67:ab:3a:d3:c5:e9:0c:0a:2a:d2:ba:ed:b1:7e:76:
78:aa:0d:bc:b2:d3:57:fb:da:dd:a2:aa:11:b7:e8:21:73:d7:
78:6c:00:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:22:39 2025 by rpki-client