Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
File: iH554lttHTfvHzG8WgIy-OdlFUU.cer (raw, json)
Hash identifier: FfRmlvLCnK3O/eiOXeP9Sr9fgeKiWUbh5CHriXDLa7k=
Subject key identifier: 88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025838
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 27 Jul 2025 22:44:16 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 103.147.198.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 Aug 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153656 (0x25838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 27 22:44:16 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91D9F5A, serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:94:22:d3:07:4f:31:ba:c8:8b:ac:21:d5:
ce:8c:94:74:47:8e:41:ea:6b:e9:bb:05:38:c5:a7:
1c:5f:08:d5:6d:e9:bb:9a:d1:83:5b:94:4b:bf:ad:
8e:c0:76:28:c3:13:d9:cf:3c:4f:25:76:56:51:46:
25:16:bc:50:43:aa:32:29:e6:67:ef:7e:92:67:77:
01:b3:e8:c3:20:fa:e0:8a:41:29:e1:dd:7b:a4:d2:
76:73:ca:52:71:74:4c:6a:99:0f:47:aa:3c:13:a6:
5c:ec:05:fd:44:b1:09:28:58:ec:06:94:72:90:f4:
a1:e1:e9:14:d4:cc:0c:57:63:92:18:df:49:8b:6d:
aa:8e:e1:a5:b3:ce:6d:08:1f:cf:f7:19:b6:d2:7f:
b0:55:b9:cf:d4:8d:f1:95:24:6f:a8:91:32:d0:d8:
9d:bf:a5:36:33:8a:b7:07:46:3b:7e:c3:62:c6:d5:
42:06:aa:a8:3d:4f:bc:62:2b:96:82:f3:3b:8b:30:
90:9b:16:f8:f6:4d:12:72:7a:d0:a3:80:fe:06:0c:
00:40:08:e7:e1:71:83:96:b8:19:04:23:ae:4c:40:
9e:30:88:3d:27:98:cb:ad:e0:63:44:6f:e3:01:f6:
5e:aa:2e:44:a1:d7:70:c5:9c:da:0a:1a:20:db:5c:
04:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.147.198.0/23
Signature Algorithm: sha256WithRSAEncryption
d6:c2:da:1f:95:3e:29:9c:cf:bc:a9:79:bd:90:8f:ba:07:16:
7e:0c:25:ce:a6:92:05:0a:1c:05:5f:02:8e:44:70:47:70:03:
ca:75:a2:6e:85:ab:b7:ce:3a:4b:18:5d:75:20:0b:ea:04:80:
c2:45:98:cb:01:18:da:a9:8a:4a:de:0c:58:47:f0:54:07:68:
82:f2:48:69:39:5c:46:6f:8e:74:99:3f:fc:32:85:e7:10:1a:
ba:64:94:3c:07:64:ad:e0:47:28:f7:17:2a:dd:88:34:b6:38:
db:09:62:6f:72:3d:f8:78:8e:0e:e2:a7:9b:e9:82:aa:91:bc:
10:af:9c:03:d3:7e:89:f4:58:6c:c4:bc:e2:be:4b:56:a8:34:
1b:c8:e5:1c:47:e3:2f:78:e5:b8:d5:4e:78:6d:40:83:8c:ab:
39:49:10:3d:78:bd:d0:b4:89:3c:24:ab:5a:10:d8:34:91:7a:
47:a5:d9:2e:9a:63:08:c2:f5:00:a3:2b:c5:3a:3f:f7:62:3c:
bc:86:5d:11:63:78:42:c8:76:90:f0:04:dc:80:98:75:25:b4:
40:9a:fa:8b:aa:36:0a:58:80:90:2e:3d:9f:02:8e:37:e6:36:
26:29:ac:5c:d5:b2:9f:6d:83:4a:a2:eb:59:20:4e:94:d5:24:
09:78:a9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:12:58 2025 by rpki-client