Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer
File: jTeJSwlB7P1NawXh4UyrhWmHsF0.cer (raw, json)
Hash identifier: 0QL0aI6Ez1iYu6YmK1HIsRSuqo7x3nhPGIc7juvfy90=
Subject key identifier: 8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023EEA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 14 Apr 2025 15:12:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 103.55.212.0/24
IP: 2001:df3:c400::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147178 (0x23eea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 14 15:12:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A915890D, serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:48:12:05:91:ef:6e:18:bc:f3:52:1e:e9:
02:7a:92:fc:5b:e1:9c:53:73:be:32:1e:24:76:4b:
05:06:2f:4c:ac:2e:27:5d:be:0c:fd:af:9e:ae:e8:
b0:41:89:0a:76:b4:64:d4:66:09:7a:7a:6b:92:88:
22:42:66:a7:ce:cb:2f:fe:33:06:4e:11:dd:89:bf:
81:22:dc:50:f3:ca:aa:0b:99:ff:c9:55:bb:16:64:
69:12:92:e0:b6:e1:22:c3:c7:90:ad:62:6d:83:7a:
31:d4:a7:e9:80:3c:20:6c:26:0c:e6:41:48:88:bb:
d1:5a:fd:40:a2:ae:36:27:19:9a:a1:dc:36:cd:5c:
3b:d2:0f:d5:9d:50:a2:fe:5e:e5:6e:7a:b9:be:05:
94:47:44:3c:c8:04:7c:41:e8:70:40:c8:ad:04:1e:
6f:53:30:6d:6a:ec:4c:16:cd:2f:4a:8c:38:97:fa:
bb:5f:71:a9:d3:90:29:6e:bb:12:19:e2:dc:e5:68:
57:5c:9f:42:4b:9c:a2:74:f0:54:06:7c:3c:f4:ea:
58:e3:38:c3:26:95:45:0b:66:d8:5e:e8:73:11:05:
ef:f8:28:17:ed:27:6b:a5:f7:b2:53:c0:cf:fe:19:
e4:29:8a:2b:27:ae:8e:d0:22:0e:06:f3:d2:9e:8f:
f8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.55.212.0/24
IPv6:
2001:df3:c400::/48
Signature Algorithm: sha256WithRSAEncryption
c4:e6:55:3c:dd:9f:e0:af:fd:6c:87:49:cd:10:de:ba:dc:80:
c7:c9:56:99:87:1d:f4:54:a9:04:80:03:b8:ce:e8:d8:ac:4b:
e3:ae:f7:76:88:7b:f7:3a:b7:7c:86:60:ae:a4:ec:4a:c4:78:
00:22:88:ea:34:95:8c:8a:4c:5a:f1:6c:b1:d1:46:8c:9f:bf:
5a:93:b0:73:25:6f:a2:4f:31:fc:72:ac:b6:0e:33:ed:9d:78:
54:86:50:61:ba:ae:0a:68:8b:db:0c:ba:fb:9f:08:e4:f7:c1:
f6:d0:80:0c:80:84:db:1d:6b:e0:7a:10:22:7f:27:e0:6c:c9:
9e:cf:8a:ea:65:f8:e5:cf:da:56:06:2c:2c:12:1e:43:29:26:
de:c9:b5:33:9e:d1:0e:e0:58:47:eb:c5:83:03:e9:e2:d7:d9:
6a:92:9f:7c:dc:a7:a0:d5:ad:7b:21:13:cd:c5:d7:58:2d:eb:
82:2f:7e:a6:20:f6:27:f5:76:8b:e6:41:8f:85:eb:89:df:17:
fe:13:92:82:20:51:80:8e:ae:ad:18:ac:e1:bd:4f:b7:a9:99:
54:1c:82:73:83:99:10:90:07:f9:74:24:9e:49:d7:47:1f:d4:
61:74:b6:9f:89:9e:ae:96:e6:3a:31:1d:9c:2d:cb:a0:b7:7e:
41:6f:73:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:51:13 2025 by rpki-client