Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer
File: nePaegrGlA0yq7nP_LBh8q7lZh0.cer (raw, json)
Hash identifier: GQjwCoeImXS9e18aFDMz+b2O8CmfRQZiEMU2DwVm1Ig=
Subject key identifier: 9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023BD4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Apr 2025 20:40:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.113.0.0/22
IP: 103.52.152.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146388 (0x23bd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 1 20:40:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A916DB8E, serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:1a:61:1b:ba:8a:5e:8b:c1:f8:94:48:80:
52:f1:a5:86:44:34:e2:21:41:89:46:61:aa:99:01:
d4:3c:20:88:d9:98:d0:5a:db:24:09:55:4a:da:c9:
88:06:67:c5:dd:63:8e:97:ee:4e:0b:db:fe:a0:4b:
8e:03:c5:db:f9:c0:70:f7:c0:3b:af:3a:df:fd:fc:
8c:ed:d1:fd:28:12:36:87:01:96:a5:a2:aa:b1:ca:
0d:50:84:3b:4c:ac:25:5d:96:a9:59:b4:d9:e8:84:
ad:47:b6:0a:d7:75:ae:de:7c:c5:81:8f:14:02:44:
03:ee:c6:61:d6:ec:9d:c4:ed:3c:e5:2f:ab:a5:71:
74:19:c6:f9:77:79:02:a7:cc:c7:90:c6:f2:3d:5a:
76:17:12:2b:2a:46:34:ea:ce:87:3e:46:a1:6f:b8:
b0:6d:bf:4f:d5:7b:ae:11:3f:f5:80:54:ec:ef:2e:
24:0f:8c:e3:fa:49:cd:44:1c:a4:4b:f6:35:d9:07:
51:88:bb:fb:82:d0:c6:b4:49:85:59:81:e3:b5:57:
67:17:a5:73:aa:4a:95:14:a4:80:d8:d7:8f:ef:44:
04:0c:08:3b:1e:4c:83:fa:79:80:cf:06:49:90:84:
b0:57:5b:96:bc:fa:be:b7:d7:2d:b5:0e:02:97:5a:
58:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.113.0.0/22
103.52.152.0/22
Signature Algorithm: sha256WithRSAEncryption
69:27:b4:f7:96:69:ec:29:dd:ec:d0:dc:c4:93:e7:76:33:1d:
76:6f:3a:8a:6c:9c:56:14:6f:b4:77:54:f6:43:83:03:4d:ae:
88:96:0a:be:56:d0:db:fd:ff:3e:42:f5:40:ca:aa:d0:86:79:
05:be:e6:9b:55:71:72:03:5e:25:50:d0:9a:82:72:a3:d4:c1:
b7:1d:62:bf:88:e1:80:cc:48:0c:c5:ad:7e:ff:5a:d4:4d:98:
06:14:62:2b:66:6a:da:76:f9:be:0b:25:6c:81:53:6a:2e:75:
d0:2a:cc:91:d6:74:69:81:a3:ac:2e:c0:ee:1b:7a:87:8c:78:
df:5f:2d:3e:7d:c8:15:9d:34:96:80:db:74:f9:f1:18:0b:4b:
10:63:52:c7:e7:e9:90:e1:c3:ac:b0:d4:69:fc:73:90:95:47:
80:4a:77:e1:8e:9d:67:ee:c3:ea:98:06:06:4e:2a:a1:31:6e:
ca:af:0c:65:7a:0e:27:1d:db:1e:64:a6:f6:55:16:6e:b5:96:
64:0e:ac:96:2e:c0:43:c2:a8:21:be:c4:96:eb:b2:8f:05:86:
48:d7:b3:c3:25:d8:ee:e0:f0:f7:e5:22:05:35:9a:d2:14:33:
09:f0:ff:46:ca:f7:18:68:3d:70:c1:34:86:16:99:6a:8c:9c:
d7:9f:8f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:44:53 2025 by rpki-client