Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer
File: nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer (raw, json)
Hash identifier: zFEg0C9+ypPC7+s0xZeMJKZj7ProOvYdaJ0vLU5VW3Y=
Subject key identifier: 9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0238F1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 21 Mar 2025 14:52:23 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 55433
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145649 (0x238f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 21 14:52:23 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9172CE3, serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6b:b6:63:5a:9f:6e:ee:f8:14:91:12:c5:a6:
2b:12:d8:f7:82:13:55:55:66:10:67:fd:78:8b:97:
c2:18:3e:44:b9:07:1e:a2:ca:31:c2:05:30:fc:55:
04:b5:b4:80:b1:03:52:b0:c9:94:df:c8:e6:f6:ad:
df:5f:5e:d6:6e:34:ce:06:03:ab:da:5a:a0:e8:4c:
6f:4e:f4:1f:29:4f:9b:aa:0d:86:85:97:84:2e:63:
70:f2:f4:54:51:e7:5d:a4:53:04:32:60:f9:26:28:
4b:41:b3:a0:0c:64:8e:21:6f:8e:c7:77:2a:0d:06:
6d:3b:10:d7:47:45:c4:8d:c8:55:36:18:52:64:03:
01:d5:3a:72:49:0a:ae:f8:d1:79:41:8e:75:43:86:
46:76:47:97:83:43:8b:c4:30:92:45:65:13:6c:36:
8f:a8:05:c1:16:6f:22:99:d1:f0:14:11:b9:c5:28:
b7:8f:21:b7:3a:0a:13:3d:97:1b:5e:72:25:b5:3f:
c9:7b:7a:e1:b6:7b:d6:c1:82:e9:dd:b7:5e:81:1d:
5b:ac:00:30:12:eb:3a:4f:65:72:c0:56:d9:42:c1:
b2:15:e9:a8:00:2f:85:8e:c9:a1:05:ed:55:ae:37:
ed:52:36:d9:f4:5b:cd:78:64:1a:a0:52:46:af:b2:
19:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55433
Signature Algorithm: sha256WithRSAEncryption
8b:e3:26:33:4a:c5:53:11:7f:da:2c:f5:0f:7f:56:09:aa:7b:
81:f9:f3:3b:ed:ba:9e:0f:a1:4a:ca:d4:84:57:49:a0:e7:43:
20:9b:fe:22:4a:0a:57:72:7b:95:b1:e7:72:9b:ea:bf:97:1d:
32:ea:37:d2:fe:00:e6:cd:7d:06:f7:cd:c0:31:e7:ab:41:65:
84:e7:1e:8a:66:80:8e:23:59:45:04:9e:6e:8c:48:be:f3:98:
b4:1d:55:3e:26:16:cd:1d:9a:57:b7:3d:d5:c1:6f:de:0a:6b:
92:a1:13:03:f1:e2:86:4f:ed:6a:9a:59:bf:c4:42:f9:5c:de:
78:06:f8:c5:af:fe:b6:4a:0f:d1:dc:e9:d1:71:a3:44:f9:b6:
97:6d:34:ac:6d:94:e3:70:26:80:e5:52:ea:f9:7a:d5:0c:5f:
19:fd:91:b5:c5:dc:68:ff:48:00:c2:81:71:9c:2c:40:54:68:
43:bf:77:5f:be:14:b2:be:d3:ae:3c:03:c8:31:93:f1:71:e7:
c7:e4:f8:8c:64:be:c7:9e:4e:2f:85:44:74:46:da:f9:b8:2f:
c0:e6:18:20:bc:e3:b1:03:d4:14:e8:4d:cd:1f:95:fb:42:b1:
08:48:99:3f:b8:48:f6:01:40:32:12:89:db:ab:54:c5:39:c7:
af:ff:85:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:52:20 2025 by rpki-client