Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
File: _vkUOxYWzaEVm1ns1eOZPpgmVP4.cer (raw, json)
Hash identifier: yrifR2EoY/azpiqRTQ+AktJfrQodC+xG25ueP7+OqGg=
Subject key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023F7D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 17 Apr 2025 12:39:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 9280
AS: 17462
AS: 18345
AS: 23670
AS: 24113
AS: 24238
AS: 45261
AS: 45425
AS: 45671
AS: 56225
AS: 131229
AS: 132324
IP: 27.50.64.0/19
IP: 27.111.80.0/24
IP: 27.111.85.0/24
IP: 27.111.87.0/24
IP: 27.111.90.0/23
IP: 43.242.68.0/22
IP: 43.250.204.0/22
IP: 45.65.12.0/24
IP: 103.2.196.0/22
IP: 103.11.52.0/22
IP: 103.12.8.0 -- 103.12.10.255
IP: 103.13.100.0/22
IP: 103.13.186.0/23
IP: 103.24.14.0/24
IP: 103.227.28.0/22
IP: 103.235.52.0/22
IP: 103.248.189.0 -- 103.248.191.255
IP: 103.255.249.0/24
IP: 114.141.192.0 -- 114.141.203.255
IP: 117.20.0.0/20
IP: 117.120.8.0/21
IP: 118.127.0.0/18
IP: 163.53.232.0/22
IP: 180.92.192.0/21
IP: 202.51.160.0/20
IP: 202.60.64.0/19
IP: 202.125.32.0/20
IP: 202.130.32.0/22
IP: 202.131.88.0 -- 202.131.94.255
IP: 203.26.196.0/22
IP: 203.28.51.0/24
IP: 203.56.250.0/24
IP: 203.88.104.0/22
IP: 221.121.128.0/19
IP: 223.252.0.0/18
IP: 223.252.96.0/20
IP: 2400:8100::/32
IP: 2400:d400::/32
IP: 2403:b800::/32
IP: 2404:5300::/32
IP: 2405:1000::/32
IP: 2407:2200::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147325 (0x23f7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 17 12:39:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:d8:2f:ef:02:0c:ca:69:b2:a7:c1:2a:25:
ec:2e:58:4f:36:d2:a6:0d:50:a1:61:3a:6a:65:54:
18:2a:bb:ea:98:4d:5f:17:8a:3b:95:74:36:ef:c7:
06:77:22:b2:a8:d4:72:99:bd:83:12:0b:1f:9f:85:
b7:4e:0f:4a:22:a2:a3:59:2f:ee:f1:ad:51:41:16:
0a:ca:8c:8e:61:88:de:6e:71:ed:ba:ce:ba:c6:c2:
16:0e:24:74:e2:6e:be:fc:77:c5:9b:ec:e1:36:50:
e8:17:d1:ec:73:7d:06:6b:ba:e5:94:a0:28:ce:db:
5a:95:94:b5:24:69:7d:d1:6a:17:fe:9f:85:0e:8c:
f9:56:e5:d3:22:db:06:63:99:51:97:8e:35:6a:78:
4b:27:54:92:f2:ab:32:fa:8d:f5:f8:72:05:74:47:
be:b6:67:8d:97:12:70:f6:1b:f0:3e:3e:e2:35:b6:
24:ae:cb:a7:84:de:4b:06:a1:9d:95:2a:e3:05:4b:
fa:90:b2:90:57:3b:73:03:9e:57:af:cd:21:53:ce:
47:58:27:e0:e4:49:b8:1b:ec:36:25:48:29:c5:8d:
5e:cb:73:95:f8:7e:52:40:39:14:fd:cd:de:86:f2:
f0:a3:f8:27:2c:eb:ee:1e:45:cb:9e:64:fc:e0:ab:
9a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9280
17462
18345
23670
24113
24238
45261
45425
45671
56225
131229
132324
sbgp-ipAddrBlock: critical
IPv4:
27.50.64.0/19
27.111.80.0/24
27.111.85.0/24
27.111.87.0/24
27.111.90.0/23
43.242.68.0/22
43.250.204.0/22
45.65.12.0/24
103.2.196.0/22
103.11.52.0/22
103.12.8.0-103.12.10.255
103.13.100.0/22
103.13.186.0/23
103.24.14.0/24
103.227.28.0/22
103.235.52.0/22
103.248.189.0-103.248.191.255
103.255.249.0/24
114.141.192.0-114.141.203.255
117.20.0.0/20
117.120.8.0/21
118.127.0.0/18
163.53.232.0/22
180.92.192.0/21
202.51.160.0/20
202.60.64.0/19
202.125.32.0/20
202.130.32.0/22
202.131.88.0-202.131.94.255
203.26.196.0/22
203.28.51.0/24
203.56.250.0/24
203.88.104.0/22
221.121.128.0/19
223.252.0.0/18
223.252.96.0/20
IPv6:
2400:8100::/32
2400:d400::/32
2403:b800::/32
2404:5300::/32
2405:1000::/32
2407:2200::/32
Signature Algorithm: sha256WithRSAEncryption
9c:3b:16:78:bc:f6:31:b3:c6:66:2e:5e:a3:0e:2e:cd:7e:af:
46:ec:7e:fd:87:81:87:c0:fb:bc:44:a3:96:78:3a:ce:28:2e:
38:d7:66:6f:cc:88:e7:54:50:53:35:e2:36:37:d1:83:6f:58:
11:6d:18:13:d7:cd:d5:df:13:9b:41:da:80:74:e8:d6:cf:50:
47:97:86:8a:6d:e7:fe:e7:ba:b4:d3:f7:f7:1e:51:bf:8b:a6:
da:06:5a:f4:6d:01:ac:ce:da:bd:3a:73:b9:b0:3e:68:e7:92:
86:2f:79:b5:6d:98:a5:9d:ee:da:83:37:aa:b7:6b:78:35:b9:
b6:96:3c:f7:c2:c2:03:df:4a:b1:0f:49:5a:e4:16:48:f4:0e:
36:53:87:60:51:8c:9f:e5:69:bb:36:28:46:7a:85:ac:46:43:
22:92:11:21:43:e6:e7:cb:4c:86:0a:11:57:97:c3:06:b4:5b:
19:a8:1a:76:cb:68:3f:bb:b7:d9:82:78:85:81:e3:12:45:b1:
58:93:bf:66:01:55:cb:2f:3b:d1:65:ad:fd:fe:56:48:ab:66:
4e:87:9c:2c:97:cb:15:f4:63:a7:b5:98:41:6d:5a:cf:26:86:
6e:fb:28:c0:3c:05:85:cc:59:a8:71:ee:88:9c:f7:20:3f:eb:
20:00:e7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:44:05 2025 by rpki-client