Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
File: Pj3GKtNpQScHmphxdsIYwJs-yf0.cer (raw, json)
Hash identifier: 7tonmQUTBTULrq9De786ZYaf/+/Z3pJ0pkAD21s38eA=
Subject key identifier: 3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024B26
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Jun 2025 15:37:53 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 133456
AS: 133535
IP: 45.64.72.0/23
IP: 103.230.50.0/23
IP: 103.233.240.0/23
IP: 2400:ec80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150310 (0x24b26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 2 15:37:53 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A916559E, serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:67:6e:be:21:3f:32:28:31:35:a7:92:ba:
f5:a0:a4:55:d8:6c:2e:af:7f:88:12:8c:f9:5f:0f:
6a:37:3e:cc:88:57:a6:8b:a6:6c:61:e1:35:9d:79:
61:56:50:25:96:88:d0:9e:b9:8c:dc:ec:74:c9:c5:
fa:d8:d6:bf:d9:bf:4d:2b:c0:6f:83:3d:4f:d6:60:
17:a9:1e:1c:2e:38:bf:a5:1e:b1:95:02:c4:2a:03:
84:59:9e:83:fc:08:73:5a:17:c7:a9:83:99:77:42:
9b:f1:84:b5:bf:51:5c:a4:69:dc:49:5b:bc:16:bc:
84:60:5a:60:92:f3:44:9f:81:f8:72:22:25:ef:46:
19:f2:a3:d4:c9:fe:c4:cd:3a:d2:6e:4b:47:95:3a:
9f:cd:c4:2c:27:82:40:01:e2:90:5e:85:35:15:d2:
df:fc:c6:62:cd:ae:7d:62:5b:12:cf:81:64:9e:9c:
03:11:9e:c1:e5:88:96:bf:cd:f3:a3:e1:57:6a:3c:
e8:b1:05:d3:62:9c:e0:f1:5b:05:19:58:64:e3:cf:
0a:3d:0e:3a:cf:8b:f0:df:e1:c7:7f:cf:e1:3e:a5:
cb:ff:ff:34:32:d6:39:82:8f:e1:4c:68:75:73:5f:
3e:7c:d8:60:a7:f9:b3:b0:b9:ff:c3:a1:6b:d8:58:
b1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133456
133535
sbgp-ipAddrBlock: critical
IPv4:
45.64.72.0/23
103.230.50.0/23
103.233.240.0/23
IPv6:
2400:ec80::/32
Signature Algorithm: sha256WithRSAEncryption
62:c5:fb:5e:d0:81:36:33:60:53:26:2a:6b:80:83:a6:0f:87:
51:07:97:26:7b:da:fb:f8:bc:35:2b:7e:d6:98:64:a0:48:cb:
b5:3a:22:25:24:6b:09:ca:5f:e9:f9:41:31:0e:f3:fc:e8:6f:
ad:53:db:5c:9e:60:8e:4c:3e:73:be:1b:c3:9f:54:0c:94:f0:
ce:87:ac:19:cb:cb:a1:e5:01:d1:fc:df:1a:63:48:71:f1:33:
e7:cc:80:5f:a2:2e:e4:ac:b3:43:84:27:64:0a:17:6a:8f:bb:
71:d6:7f:94:56:12:a8:30:32:07:53:07:67:a0:ef:e6:84:7f:
27:cf:02:f3:f7:05:e9:9b:29:e0:a4:53:0d:ca:f4:dc:ef:b8:
3f:44:84:d4:a7:be:bb:c9:cc:42:e2:44:4a:3c:24:02:0e:94:
9a:5d:bb:b2:ec:30:bd:ad:bc:b9:14:a3:e3:91:24:22:39:a4:
01:5d:ac:bf:13:a8:6a:02:a0:e7:d6:fb:d6:16:18:fe:95:fd:
bb:71:42:bd:f9:b3:d6:f5:1c:b2:64:96:e9:45:0c:79:cb:b8:
80:ce:8d:85:8e:f6:d6:4e:94:5a:ac:03:fa:48:99:e3:6f:eb:
24:5f:3d:e1:65:14:46:6d:e6:4f:0c:b9:3d:e7:1b:c7:8d:d2:
c3:f4:8e:14
-----BEGIN CERTIFICATE-----
MIIGOjCCBSKgAwIBAgIDAksmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDYwMjE1Mzc1M1oXDTI2MDczMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjU1OUUxMTAvBgNVBAUTKDNFM0RDNjJBRDM2OTQxMjcwNzlBOTg3
MTc2QzIxOEMwOUIzRUM5RkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJKGduviE/MigxNaeSuvWgpFXYbC6vf4gSjPlfD2o3PsyIV6aLpmxh4TWdeWFW
UCWWiNCeuYzc7HTJxfrY1r/Zv00rwG+DPU/WYBepHhwuOL+lHrGVAsQqA4RZnoP8
CHNaF8epg5l3QpvxhLW/UVykadxJW7wWvIRgWmCS80SfgfhyIiXvRhnyo9TJ/sTN
OtJuS0eVOp/NxCwngkAB4pBehTUV0t/8xmLNrn1iWxLPgWSenAMRnsHliJa/zfOj
4VdqPOixBdNinODxWwUZWGTjzwo9DjrPi/Df4cd/z+E+pcv//zQy1jmCj+FMaHVz
Xz582GCn+bOwuf/DoWvYWLGVAgMBAAGjggMvMIIDKzAdBgNVHQ4EFgQUPj3GKtNp
QScHmphxdsIYwJs+yf0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTY1NTlFL0Q0N0ZFRkNFRDQwQjExRTM4NUQ0OEE3MDU5MTFFQTMyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2NTU5RS9ENDdGRUZDRUQ0MEIxMUUzODVENDhBNzA1OTExRUEzMi9QajNHS3RO
cFFTY0htcGh4ZHNJWXdKcy15ZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAglQAgMCCZ8wOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAEtQEgD
BAFn5jIDBAFn6fAwDQQCAAIwBwMFACQA7IAwDQYJKoZIhvcNAQELBQADggEBAGLF
+17QgTYzYFMmKmuAg6YPh1EHlyZ72vv4vDUrftaYZKBIy7U6IiUkawnKX+n5QTEO
8/zob61T21yeYI5MPnO+G8OfVAyU8M6HrBnLy6HlAdH83xpjSHHxM+fMgF+iLuSs
s0OEJ2QKF2qPu3HWf5RWEqgwMgdTB2eg7+aEfyfPAvP3BembKeCkUw3K9NzvuD9E
hNSnvrvJzELiREo8JAIOlJpdu7LsML2tvLkUo+ORJCI5pAFdrL8TqGoCoOfW+9YW
GP6V/btxQr35s9b1HLJklulFDHnLuIDOjYWO9tZOlFqsA/pImeNv6yRfPeFlFEZt
5k8MuT3nG8eN0sP0jhQ=
-----END CERTIFICATE-----
Generated at Sat Jun 14 17:15:40 2025 by rpki-client