Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer
File: PDd12fh_DqopaGZ3TqYvYnTQZss.cer (raw, json)
Hash identifier: hi3sTCASfSwNjKQIGV7kZEX6ZPcKfRTcjnG84DPW10s=
Subject key identifier: 3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025C3A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 08 Aug 2025 18:34:33 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 4654
IP: 202.89.252.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154682 (0x25c3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Aug 8 18:34:33 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9193388, serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d1:91:fb:0f:4d:29:65:62:91:72:30:be:a8:
d9:7a:4f:5c:dd:ec:bd:0c:c4:82:f7:a0:0d:3b:76:
a5:5c:b8:e9:5c:31:b4:ca:57:0f:93:32:09:76:0d:
55:ac:25:51:83:eb:7c:99:3b:c5:66:f9:ed:a9:97:
e0:5a:0f:cb:ed:e0:ef:ed:03:7b:24:0f:21:84:af:
fe:82:8c:ac:b7:23:2c:ef:7c:c6:a2:3f:96:57:05:
fb:b8:79:5c:2b:ad:3f:43:29:fa:18:a2:c8:81:d3:
1a:24:96:ea:92:b4:5b:6b:42:b0:3d:9a:e5:d3:24:
ac:f2:e0:a7:b0:03:6c:e3:0d:20:fd:f7:f3:e6:ff:
84:d3:85:04:f3:b6:91:1b:01:12:53:cb:48:e4:21:
d3:be:b5:c6:2f:01:a7:dc:35:1a:5e:7b:18:82:99:
52:77:f8:c2:ab:99:76:96:6d:fe:fb:17:10:32:87:
c6:72:67:02:36:c8:af:75:2e:54:91:69:9a:dc:e4:
07:d1:f0:49:27:b5:c0:94:91:52:f9:52:df:b1:0e:
c2:00:e3:c1:96:37:89:fc:b6:a1:82:60:92:0d:4b:
27:1c:f5:17:08:0f:af:45:89:86:71:3f:7a:af:95:
c9:9c:82:4f:a9:8d:03:07:15:a6:a8:c0:f0:2d:e1:
ec:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4654
sbgp-ipAddrBlock: critical
IPv4:
202.89.252.0/22
Signature Algorithm: sha256WithRSAEncryption
25:e8:85:13:d1:7d:f1:73:36:f6:6b:15:46:5a:9a:77:f1:3e:
93:e0:bd:42:0b:67:1f:05:4f:d4:00:45:06:d7:96:26:94:b3:
7b:a4:59:f2:3f:b4:29:7a:b2:af:ef:2d:ec:2e:9b:c1:6b:73:
9c:bf:61:f0:93:f0:6b:a8:a4:30:63:f0:e8:11:1a:73:c4:df:
02:52:6d:d1:40:7d:87:25:15:bf:ff:f5:3b:b1:10:34:d1:c7:
e7:0c:1d:bb:a8:a2:37:c3:cf:6f:a4:68:db:a3:22:07:99:ff:
5e:06:12:a9:fe:2c:39:f5:49:bb:d3:3e:85:4d:c2:10:18:c5:
a1:e3:0f:c8:72:33:f0:36:38:48:ca:80:a5:c3:47:fd:31:09:
1b:6a:d4:4f:67:4b:02:73:0d:c0:98:40:9c:4b:c0:9f:44:46:
99:b2:6c:cc:66:28:e5:2a:e3:a7:6b:f9:96:3a:a6:5c:6b:17:
32:96:07:fc:70:58:ec:f7:b2:47:c1:f6:ce:61:63:7c:0a:4f:
3d:6e:f1:1a:34:81:fd:4c:1a:52:ab:dd:d1:4c:1d:40:8b:a1:
7a:06:31:63:12:20:d7:a7:a3:f8:07:11:a4:08:9f:65:38:05:
3a:ba:b8:da:41:a7:b4:d1:56:3e:13:d2:7c:ca:ac:5e:96:21:
6a:53:84:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:43:55 2025 by rpki-client