Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
File: nczQgPBy3iTvhCxqopJJnvE2m_Q.cer (raw, json)
Hash identifier: n2mn00oT5jMAQmE9z1re1cjLQRyIuFS6qAhU+PxmQEM=
Subject key identifier: 9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02498B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 29 May 2025 15:37:52 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 132257
IP: 103.8.236.0/23
IP: 103.243.150.0/23
IP: 2001:df0:2b1::/48
IP: 2404:2940::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149899 (0x2498b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 29 15:37:52 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A916A504, serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:4e:2f:b3:c4:4f:9d:d8:13:61:cf:ab:7a:
69:64:90:dc:24:a6:74:2a:5b:c7:12:89:dc:3e:49:
aa:77:b2:15:5f:96:2a:14:fe:b3:1d:4d:2f:dd:c1:
40:ae:40:df:d7:08:cc:a5:e6:44:4f:89:e7:1a:63:
5e:ba:ac:0c:6f:51:ce:5a:45:6a:a5:ef:77:cd:3f:
8f:a8:4e:a5:66:5b:57:f2:65:0e:2b:91:eb:c1:f0:
0a:08:08:d2:14:e8:c4:f7:d1:25:9a:1c:cc:ab:f5:
09:4a:48:55:84:a6:22:17:8a:ad:29:16:99:8b:09:
ba:9b:b0:c8:0d:66:6b:df:7e:d8:29:cd:6c:04:71:
90:f6:34:04:9b:d9:e7:48:d0:bd:d7:05:5a:ff:62:
0d:f0:08:88:51:b8:7b:f0:de:e2:b7:0c:10:89:f7:
63:a6:dc:34:d2:1b:68:56:4d:6c:88:7d:01:6a:9c:
76:5d:d4:be:e3:4f:ac:cc:ca:5b:bb:58:f6:21:d7:
f7:25:9a:50:f0:1c:cd:39:0d:75:c2:25:c9:13:ca:
5d:15:d6:64:43:2d:6c:5f:7b:84:05:fb:1d:3f:b8:
3a:9b:70:cc:48:dc:48:55:5e:9a:77:e4:31:89:27:
1e:86:e3:38:0e:b6:d7:d6:6c:d8:65:0d:e3:4d:25:
a0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132257
sbgp-ipAddrBlock: critical
IPv4:
103.8.236.0/23
103.243.150.0/23
IPv6:
2001:df0:2b1::/48
2404:2940::/32
Signature Algorithm: sha256WithRSAEncryption
a1:ab:a8:2d:08:85:49:50:8a:08:4b:b8:cd:2d:52:fa:aa:15:
25:53:97:88:d2:43:3e:b2:49:34:84:c5:f6:ab:49:73:c0:76:
6a:dc:21:c5:34:00:7d:b0:a3:4a:79:c7:dc:7f:57:14:28:25:
6d:e5:ff:b6:36:b1:b9:1c:22:87:1d:8e:56:00:f0:e3:bc:63:
e9:2a:ad:99:5e:2d:76:06:2f:d7:b4:ea:62:3d:f8:3f:0d:b8:
89:33:97:89:2f:95:19:29:7d:ef:35:ad:c8:c2:0b:7f:38:43:
9f:1f:ea:0b:0a:d7:c5:cd:10:0b:30:4f:16:e3:c8:66:d4:2b:
24:6c:28:77:ec:2e:ac:91:ee:27:dc:78:8d:f6:8d:44:7b:00:
0d:7e:6b:db:6c:9e:de:5e:59:cb:10:c2:89:29:14:68:54:3c:
ef:ea:bf:fe:8e:fe:4b:b0:13:66:62:7f:0a:c8:b6:57:d7:b3:
06:36:a7:80:a5:6c:ab:c1:94:68:b3:be:5f:63:dd:dc:bd:f0:
72:fc:d1:2b:b3:7c:96:6b:f2:f9:4c:ba:1b:af:97:b6:74:4b:
a1:bd:9d:cf:6b:fe:a2:49:13:3e:41:6a:0e:22:71:d3:e2:0d:
90:0f:fd:95:42:0b:8c:a0:44:42:19:96:d7:77:50:26:e6:e2:
9f:4c:a4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:18:02 2025 by rpki-client