Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer
File: _NTfjrSqZK9Wt9DHMm4pEEVDzFU.cer (raw, json)
Hash identifier: N2Ao7TQzQ7dQ5MoZOgZ4ahMSgmRwrE8/absZQO+UnWI=
Subject key identifier: FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023E40
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 10 Apr 2025 04:08:26 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 147182
IP: 103.174.48.0/23
IP: 2407:fac0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147008 (0x23e40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 10 04:08:26 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A918233C, serialNumber=FCD4DF8EB4AA64AF56B7D0C7326E29104543CC55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:0e:02:18:c3:df:21:3d:64:13:b4:ca:ed:
e8:f4:6e:d3:ab:ab:bb:a1:56:f1:ad:ea:30:77:2a:
5a:75:f3:d3:00:75:ec:07:4b:03:d9:b1:8c:58:3f:
58:46:f1:7f:a5:a2:e2:ca:91:76:de:34:ee:bd:3c:
31:08:b1:d4:e1:54:2c:ca:9b:ea:b3:b2:77:d7:fd:
44:ab:7b:43:0f:c2:bc:90:eb:ed:8a:86:42:b7:12:
48:2e:da:4c:bc:19:f9:18:4d:6a:12:67:02:a7:b7:
e5:68:81:44:58:7b:36:37:88:ea:65:10:ce:2d:41:
ae:fa:0d:00:34:66:b2:c2:bc:05:16:84:16:28:a2:
c6:ac:06:2d:e6:4b:61:1e:e2:f4:4c:61:a0:22:06:
e7:af:ee:d2:d1:80:97:66:9c:50:1a:f3:dc:5b:82:
d8:6a:97:46:88:af:2a:9c:06:aa:1f:e8:4d:a5:a5:
e2:8e:f9:7b:b1:2e:27:12:b2:83:88:b5:68:ba:38:
0e:da:72:29:b3:07:fe:c6:d2:49:ad:0a:a8:37:ac:
db:df:d7:cd:ce:34:af:8d:2e:9e:74:0d:ed:0e:b0:
68:21:16:7e:b1:7f:8e:e2:94:b2:64:00:df:0b:76:
02:52:c2:15:6a:38:f0:90:c6:3b:0c:a4:fc:2b:a9:
17:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D4:DF:8E:B4:AA:64:AF:56:B7:D0:C7:32:6E:29:10:45:43:CC:55
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918233C/E6491FE2621411ECB006712CC4F9AE02/_NTfjrSqZK9Wt9DHMm4pEEVDzFU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147182
sbgp-ipAddrBlock: critical
IPv4:
103.174.48.0/23
IPv6:
2407:fac0::/32
Signature Algorithm: sha256WithRSAEncryption
41:af:7e:de:3e:68:60:f5:9f:4e:fd:fa:55:b2:29:35:c0:24:
21:a8:fb:53:fd:4f:cf:c0:eb:d2:0c:21:27:17:a1:ab:f4:16:
be:49:ab:ff:16:41:8a:92:fb:e1:a6:e6:10:30:a0:10:80:d0:
9d:58:8a:38:17:55:86:99:73:7c:5d:83:b7:ee:69:76:5a:b9:
1d:c6:0d:df:cb:ca:fd:74:b8:25:93:38:a9:12:e6:21:8d:55:
85:ea:90:30:b4:a8:ac:83:58:17:e9:7d:b4:35:b7:d2:03:47:
96:74:d1:cf:89:ce:dd:b6:d3:c8:0a:67:ca:9b:47:29:92:93:
00:ea:1c:8a:ee:97:e6:90:46:e9:65:9b:4c:3f:d1:76:a3:af:
0c:70:a5:c7:60:94:58:1f:bc:10:87:bd:27:da:6c:4b:cb:67:
44:57:35:89:eb:f7:7a:48:82:f4:8d:c7:cb:91:ab:6b:c3:7a:
f4:4a:10:03:09:37:3c:c0:a7:5d:1d:96:7f:3d:0b:89:21:7f:
2e:e6:0b:9e:b2:39:53:04:0f:ad:bc:15:5e:74:3b:fc:65:e6:
ee:d9:5d:05:6b:17:4b:fb:72:ef:79:1f:88:ae:3e:bd:1b:8b:
ea:0f:b8:31:55:b6:74:41:b9:dd:b3:8a:b1:61:01:40:8a:09:
a6:9a:43:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:56:53 2025 by rpki-client