Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer
File: UK5xbz02ub7q4n8QBo-eNqIzq5E.cer (raw, json)
Hash identifier: weXyMfrUi2NUtBx6s2ZVCEGVze7v7AuoyqtFc5f3ngY=
Subject key identifier: 50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024C0C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Jun 2025 02:51:39 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 202.49.204.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 16:13:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150540 (0x24c0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 4 02:51:39 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91CB4E9, serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:46:74:28:19:14:df:de:fd:22:a1:a2:ee:
cb:63:c3:d1:ea:79:de:07:73:9c:82:79:3e:27:88:
8f:45:57:b8:8d:ef:39:2b:a0:1c:fb:df:d5:1d:b1:
ee:23:e2:af:e0:b5:b3:0c:47:81:3a:0f:37:c9:ec:
f5:1b:26:b6:57:89:3b:20:b8:2d:7c:2f:2e:e6:9b:
67:2a:c5:f4:f6:82:49:49:3c:b5:1f:29:a6:e0:22:
3d:e4:8d:eb:05:71:67:35:86:5c:bd:ca:8e:25:be:
aa:76:04:8b:5c:a6:24:03:c3:03:e0:42:f6:e5:0a:
36:49:5f:c4:15:84:77:4c:f6:1c:83:b0:05:40:10:
96:ba:1a:82:42:d6:bb:ac:8a:3f:4b:ba:5a:b6:34:
54:9d:61:fd:df:a1:65:03:22:f8:dd:ec:d1:eb:b8:
0b:40:b4:af:ad:b2:d2:77:82:af:8c:3f:cd:72:05:
bb:18:c0:2a:98:20:cd:a2:8b:30:88:02:f8:74:75:
f1:af:38:5d:db:ad:ec:f3:1a:b6:10:35:9c:d0:96:
d2:8a:0b:42:03:07:bc:62:48:24:87:b7:b2:70:1d:
d7:ad:e5:75:82:06:7d:6e:81:1e:c1:7d:25:60:96:
1e:45:00:cc:2c:6a:6b:01:76:db:7d:8b:4d:af:d9:
17:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.49.204.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:9d:70:28:d5:c1:7a:5a:2e:87:20:52:2f:1f:60:dd:02:94:
a3:74:0e:21:9b:a2:db:ed:51:9e:ee:cc:76:69:27:ed:48:96:
30:1b:d3:ec:6b:56:92:a7:2f:a6:7c:db:cb:1f:d9:9d:fb:c8:
96:f9:31:e9:a7:38:49:0b:0b:10:23:cb:1e:0f:5c:69:a9:82:
8c:95:c6:ca:08:ea:24:60:4b:68:b1:67:16:f3:f1:68:5c:69:
d5:a6:da:ca:15:68:18:25:6c:dc:c0:ac:9b:c1:9e:dd:cc:bc:
4b:28:0c:bd:8f:5f:89:93:e5:75:ad:51:6a:1b:98:c7:34:69:
82:95:67:1b:bd:2b:ce:3d:ae:74:51:1c:5c:bc:6b:59:b2:07:
35:a6:98:6f:a9:d9:fa:a1:25:ce:50:52:7f:36:0b:70:30:72:
1e:18:9f:f3:65:be:ce:76:60:90:99:8e:df:92:7d:32:21:65:
47:1c:8f:4a:c1:e6:78:64:1c:51:0f:1c:39:a2:ce:82:5f:66:
53:8a:e8:17:df:0b:8d:bc:c1:87:7d:5e:5f:07:ef:2e:99:7a:
39:05:b0:ec:aa:68:7d:43:76:de:d2:5f:39:42:4b:34:93:cd:
1d:41:06:55:fe:ab:7b:dc:82:4a:34:91:00:2c:4a:de:3c:82:
b5:47:77:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:23:32 2025 by rpki-client