Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer
File: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer (raw, json)
Hash identifier: 0WbOO9APt7F3J/2TvlJgPVQFJ0Uz0cdEb4h/PLyeOJk=
Subject key identifier: 64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0255FA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 16 Jul 2025 06:59:50 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 139631
AS: 140666
IP: 2001:df4:5440::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 12 Aug 2025 22:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153082 (0x255fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 16 06:59:50 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91F5756, serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:cb:f7:85:a1:c2:08:d8:e2:91:29:6d:d4:
ae:00:95:f5:24:d6:38:1c:25:bc:53:e7:0d:9a:68:
be:df:78:3d:a1:8a:d1:56:88:9e:27:69:ac:ae:ab:
db:10:1b:52:0d:04:88:fc:fa:6a:ea:25:1b:1a:b1:
b3:1c:54:ed:6b:22:01:a6:0f:ee:e4:ff:89:23:3a:
e9:f2:9c:90:69:ca:cd:c3:6f:c1:f7:99:24:49:65:
a3:0b:11:00:d2:27:fb:7d:a2:a9:1f:1c:77:e1:d3:
bd:ff:6c:49:8c:31:e7:c7:04:5a:c8:6a:e4:de:77:
1e:b3:24:f2:eb:6a:f2:f2:31:30:da:da:29:5c:23:
16:66:09:60:0c:83:21:8e:37:55:3c:84:08:49:92:
62:9f:54:7a:d4:c8:23:c1:1c:d1:a9:9e:1d:b2:66:
25:5a:6c:58:7d:c8:2a:d7:80:2f:bd:6a:21:0e:ee:
2e:df:ef:66:a0:60:03:bc:72:fc:75:a7:7d:c4:3a:
6f:0f:25:51:5a:01:d7:8a:42:10:94:34:8f:d6:d8:
f2:ad:04:10:87:d2:a7:dc:ba:bd:5b:dd:aa:39:02:
07:e5:78:92:98:03:f2:8a:41:97:e0:1f:3d:68:48:
66:dd:d8:d9:0a:91:58:ab:7e:57:1b:4d:38:02:91:
12:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139631
140666
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:5440::/48
Signature Algorithm: sha256WithRSAEncryption
81:f3:07:c0:58:03:2b:e0:33:e3:1e:8d:50:70:81:e7:8b:74:
83:3e:a9:e1:52:5d:df:88:a6:b2:cf:d5:8e:61:ae:b8:89:b0:
fb:d4:37:30:3a:8e:6c:5c:a6:71:bb:62:fb:00:5a:00:1e:c5:
6b:fc:ef:0d:d7:80:6e:e4:5c:6a:da:68:a7:c6:f6:8c:d8:30:
01:82:8c:92:44:5b:93:67:80:93:cb:d3:1d:0a:28:4a:a8:d9:
2c:87:3a:71:39:32:59:01:b3:d6:59:17:04:42:62:3a:4f:16:
a9:b4:4b:f2:26:33:60:eb:fe:81:10:a5:b4:d2:a8:91:e9:1b:
0b:34:57:f6:de:2a:5a:e0:6a:9c:ce:54:2a:7e:7a:68:27:0a:
a3:3f:28:fe:66:60:0b:4a:ba:b4:05:c8:47:9a:bc:91:df:df:
8f:88:17:09:0e:1d:e0:4f:12:76:be:0b:20:34:fc:c1:dd:ef:
6e:a9:cd:f1:27:09:99:d0:6f:32:14:ee:1b:b7:d5:40:44:6e:
87:bb:6a:72:66:18:36:de:ee:37:18:59:e6:bb:05:b1:3a:73:
9c:8d:99:66:d3:1e:58:14:f9:48:e9:95:d5:c2:0a:93:23:05:
e1:4a:63:6d:3e:ef:86:4b:5a:58:f4:17:87:b4:00:e1:0f:c1:
00:eb:4d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:41:30 2025 by rpki-client