Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer
File: fd08hfmnH2JfzMEMqDHld3CbTz8.cer (raw, json)
Hash identifier: KlRwJe5NubYdxd3knnndPXS7Se4+pFbiGZqa4Qq7e+0=
Subject key identifier: 7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0249F7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 30 May 2025 17:40:53 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 149815
IP: 103.186.252.0/23
IP: 2400:7760::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150007 (0x249f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 30 17:40:53 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A9167B41, serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:00:69:ad:b2:03:35:44:63:50:e6:0e:35:
a0:af:e2:82:b2:bf:ae:a5:94:1e:1d:e2:e7:ec:4e:
56:20:f3:f8:2d:a7:99:ed:9c:e3:b8:c4:d5:c8:38:
9c:45:51:49:91:2b:05:01:8b:a3:69:4a:56:bf:7c:
a7:b2:4f:b3:5d:c7:d8:96:63:26:2d:43:39:02:8f:
2f:2c:ab:38:69:12:ef:ec:64:cd:f2:04:42:80:82:
3d:08:64:ac:d1:ad:a1:76:6e:ee:b7:c1:1e:c9:c3:
cc:ca:53:14:7d:8e:2d:73:db:c2:ee:18:ba:e6:4c:
34:51:b2:2f:89:14:aa:fb:ba:a4:d0:8c:d6:ac:b0:
a6:aa:eb:4a:62:7e:0a:ef:32:88:5d:55:72:15:8d:
5f:eb:1d:f2:8c:c9:fa:14:77:11:4b:ab:95:32:33:
ce:27:9d:60:e4:5f:9a:95:58:ba:98:62:61:3e:d8:
cb:7b:d8:b7:c3:47:b9:f0:2a:37:f8:36:b1:b4:ae:
df:6f:11:56:cb:98:eb:78:d9:38:b9:57:76:48:4b:
77:bf:aa:04:b0:d9:1f:50:f9:23:c9:68:d8:95:8f:
da:13:87:c5:a6:31:10:26:5d:0f:87:d5:a7:50:21:
ce:8c:9d:78:8b:19:1a:2b:29:38:45:8b:23:de:ea:
a5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149815
sbgp-ipAddrBlock: critical
IPv4:
103.186.252.0/23
IPv6:
2400:7760::/32
Signature Algorithm: sha256WithRSAEncryption
a5:c5:a3:14:bf:3e:d6:87:75:2f:7e:f0:05:83:03:a0:f8:df:
e0:e2:87:fb:15:94:0b:e9:d4:09:3f:46:32:0d:2c:e7:26:38:
bd:2c:f1:bc:e9:ff:e3:a7:44:5a:6e:01:2a:28:5f:a6:c8:ac:
ec:35:21:4d:d8:da:b3:6d:cd:32:56:f0:d5:a3:a5:9c:69:f5:
a5:cc:01:c0:8f:02:a3:98:6d:d3:b7:c1:a8:89:62:9c:7f:22:
f1:82:68:9e:00:c9:74:46:f1:97:b6:ab:63:ea:66:77:a8:8c:
9f:b8:43:c3:2a:e8:f5:45:d6:75:9a:58:b8:ca:31:85:6e:ae:
b9:03:19:a2:37:e6:6b:a2:d6:49:a2:6e:8b:e4:c8:32:16:ca:
09:30:f0:72:15:1c:50:a4:6c:3a:e8:f3:76:aa:93:33:45:35:
eb:a6:ac:fd:25:db:92:6c:92:39:da:21:60:9a:25:30:52:48:
6e:d1:5e:9f:d8:ed:d4:21:7d:a8:f1:e8:78:b5:13:45:26:b3:
be:5f:ce:ce:05:f3:2e:a4:53:fd:12:e1:13:e4:ed:2c:84:df:
cc:be:db:4b:4b:7b:4a:cd:19:c8:b8:21:73:5b:c6:8a:b3:4f:
07:a4:b7:15:61:a4:c4:74:8b:7a:20:76:c3:bc:ed:27:57:5a:
7c:31:20:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 04:45:48 2025 by rpki-client