Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer
File: jKig9ls44oUnna2vt9k_eFFssRg.cer (raw, json)
Hash identifier: kfwU4t/3aXpt4uvzbtgWxrSy7BPawVI+Hyzs+4A+BS8=
Subject key identifier: 8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024B53
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Jun 2025 19:11:48 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 3550
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150355 (0x24b53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 2 19:11:48 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A9168494, serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4c:5b:75:e0:4b:a1:42:dc:7c:89:59:4c:41:
9a:12:2d:81:be:5e:14:e1:6d:56:c7:f2:41:4b:60:
92:d2:2f:c8:42:da:c6:e8:da:6e:bb:79:36:e0:b0:
36:07:fb:16:91:9f:07:29:7e:0d:07:72:38:7f:eb:
36:49:4f:df:cc:d0:88:b4:56:77:1d:08:f2:f9:77:
ba:31:84:b6:90:98:66:d9:0c:8c:05:01:44:84:52:
31:2e:78:a0:98:06:76:4c:fe:f0:c8:b0:f9:4e:2e:
2e:01:c3:62:e5:ee:ea:b8:d8:92:35:98:08:c5:4f:
32:3f:65:a0:cb:91:4e:f8:cb:28:f0:50:c7:27:bf:
4b:6d:e2:4a:48:cf:8d:52:7b:0c:a0:85:0d:94:d7:
39:58:da:6a:f0:2c:8c:00:8f:91:a6:37:0c:5e:25:
f4:41:ca:79:c0:dd:36:05:48:c2:a1:36:87:bd:99:
25:29:39:18:d7:36:00:47:c7:98:94:64:87:01:46:
d9:e9:31:70:b4:23:d7:96:6b:50:66:fe:c9:dd:a4:
40:ff:87:bd:9b:5f:71:cc:91:62:1f:9c:33:ed:b9:
b7:f4:b1:69:9a:a0:83:6b:9c:d6:23:d7:54:50:fb:
61:60:5e:65:1c:64:9f:1d:d6:6b:28:c4:8e:58:9a:
c3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3550
Signature Algorithm: sha256WithRSAEncryption
d5:fe:3e:8e:fa:04:b3:56:ff:cf:28:88:da:37:cb:d8:61:8a:
f7:46:eb:f9:06:e8:4a:f8:56:5e:a7:14:98:85:5f:e6:88:b9:
2c:c0:a4:4e:dc:0c:65:7b:c8:e9:99:29:f2:00:8f:7f:6d:bd:
22:b6:5d:c1:f4:25:bb:ed:1b:3c:9f:3b:49:6a:b2:ef:d9:b0:
91:54:2c:fe:3b:95:b4:13:8e:1b:27:ee:ff:6c:ef:26:89:eb:
44:93:38:4b:a3:09:bc:d0:e8:cd:63:23:15:5b:b4:1f:9c:71:
95:e0:a5:cc:c4:ef:ff:58:db:40:51:13:27:56:32:09:b0:43:
09:19:6f:a0:c8:36:89:98:0f:ca:e0:0f:37:39:aa:7d:b9:e5:
23:31:90:2f:44:43:96:4a:b3:27:c5:e9:d1:10:66:50:8e:17:
c3:82:a7:20:98:53:97:c9:17:d0:13:34:dd:4b:68:00:a7:eb:
2e:a1:6c:26:ff:44:0a:9f:b8:e0:27:b2:a4:36:2a:e1:d5:d8:
78:f0:83:f7:f3:96:d8:5b:0d:a1:1d:5e:19:b6:d6:3b:0e:6a:
b7:91:16:76:00:1b:80:98:77:ad:6e:cb:bc:cc:1e:75:f3:82:
40:5f:5a:e0:8e:29:47:14:10:fb:78:5a:e6:46:d1:7d:62:24:
e4:46:b0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:17:18 2025 by rpki-client