Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
File: iiZW272QAzaEH_UDU2_5kY_rJcY.cer (raw, json)
Hash identifier: zU8R6JTHNiVnJ2Wksop2KQ+XOmAddenHLweqwdlrIMg=
Subject key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024DAC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 11 Jun 2025 18:57:39 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 9554
AS: 135436
IP: 103.219.172.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150956 (0x24dac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 11 18:57:39 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91A267C, serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2d:93:04:a7:09:65:cb:0e:c6:89:20:52:e0:
50:2f:54:88:c0:49:83:3c:cc:05:47:ee:23:ab:39:
e8:65:f1:23:64:54:bb:53:bc:e7:9f:3a:81:56:b6:
2c:c3:66:73:88:78:c9:28:5f:70:d9:68:8b:fc:e3:
64:38:33:c9:70:99:ba:ce:e9:16:68:3e:a9:32:1d:
1a:e8:c3:ee:23:a6:52:06:49:dc:24:aa:3a:00:67:
67:5d:18:87:4b:c8:b0:bb:99:63:c0:5e:a0:44:18:
d0:6f:e1:0f:1f:c6:da:71:70:21:0e:49:6e:28:36:
76:e6:78:d3:3f:af:a3:b5:f4:5e:0f:4a:4b:b8:07:
e3:86:a6:f7:e5:c1:3b:e3:bc:e0:30:10:0d:81:97:
65:83:af:26:6d:79:49:f9:8c:fe:ba:4f:21:ef:54:
2e:20:22:77:12:57:46:3c:b0:d9:71:a1:0e:b3:27:
dc:8b:12:91:4e:96:06:e7:4f:8f:ed:4e:95:9a:d3:
e9:a2:88:32:97:2b:96:b3:bc:68:44:27:1f:6b:72:
ab:21:ef:cd:d2:e6:91:84:46:78:91:94:12:6d:37:
d9:86:a8:a1:e3:87:b9:b6:3e:67:56:33:54:89:22:
1d:e1:da:d7:57:b9:e8:1b:7b:32:3f:b8:ca:44:e5:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9554
135436
sbgp-ipAddrBlock: critical
IPv4:
103.219.172.0/22
Signature Algorithm: sha256WithRSAEncryption
97:29:b0:70:f6:12:9b:f4:90:04:e7:d5:3c:49:60:b9:71:2c:
ac:ca:3d:18:76:d5:3a:83:ac:7d:c2:a3:7f:2b:4c:29:06:d1:
3a:5e:c8:f3:7f:37:5f:57:b6:0f:52:b0:80:a0:8b:9c:7b:50:
d5:c8:5a:f8:9c:29:4d:5a:b2:9a:97:6b:5f:0f:e3:cc:10:e5:
05:d0:7f:8b:69:ff:af:9a:d1:7d:23:c2:ff:27:77:ee:d4:9b:
31:b0:f7:b3:d0:4c:33:ed:38:85:e4:fb:56:ce:0f:0c:03:b6:
66:1f:23:fc:ec:eb:fe:f8:e0:53:7c:9c:12:e8:ac:27:b3:60:
b3:a3:db:7c:72:75:a1:67:f3:6a:0b:5d:44:01:dd:ac:48:d6:
7f:cc:cc:84:60:a0:10:f1:fd:9a:bc:6e:c9:34:3c:92:f6:ae:
db:1b:a0:fc:26:c8:b3:f1:be:fd:9c:c0:50:94:05:df:0d:c6:
b6:c2:32:24:c8:6d:ec:8c:dd:31:bc:a5:58:a2:76:16:db:57:
2f:27:43:4a:b5:de:82:17:0a:62:ec:04:3f:9a:7e:62:ce:60:
f0:a8:55:5d:ee:eb:0b:c6:33:f7:9b:aa:43:af:52:71:83:63:
58:00:7e:a2:f0:38:b3:b8:d8:bd:ac:2a:e9:7b:28:6e:26:e0:
6c:07:39:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 04:52:04 2025 by rpki-client