Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer
File: pDc5u18gwUzF_EnjdVh9s7ciN68.cer (raw, json)
Hash identifier: t0mU8KeTYE/qgQp7kg3gn3pcE8ON9Kw6rEjtR8L9Ksg=
Subject key identifier: A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024C7D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Jun 2025 03:33:36 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 55523
IP: 27.96.24.0/21
IP: 2402:7200::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150653 (0x24c7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 5 03:33:36 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A9172B7E, serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:9d:fe:98:7a:f7:29:1a:1c:6a:35:b7:65:
4f:cd:5d:3a:1c:a5:a4:31:5f:ec:c6:ff:45:ef:00:
85:07:55:55:da:a2:e9:47:c4:13:59:c8:91:2d:9a:
5c:ef:d2:db:2b:c5:1e:c7:d8:24:2d:f6:fd:dc:a3:
ef:9e:77:a3:c2:bb:f2:f4:b5:95:b5:4a:a5:7d:61:
8e:3b:46:78:01:f6:eb:7d:61:02:c6:ca:1a:dd:d5:
fc:05:bc:0d:ea:8d:88:99:48:a1:a2:c7:81:8d:73:
26:dd:3b:56:7e:f3:ea:a3:7c:f1:ad:cb:7d:55:14:
a9:d1:82:6b:5d:08:7a:35:bd:cf:42:d6:28:1d:cb:
7d:57:fa:63:d6:1e:a6:01:53:56:d8:52:45:57:ee:
67:12:ab:45:84:f6:3b:74:ed:99:f6:40:c9:6e:cd:
72:67:58:e3:99:6b:e9:39:bf:ee:23:2e:ee:a9:6a:
f5:d3:3c:8f:82:fa:cc:84:15:00:f2:ad:83:ed:be:
40:ea:1c:f9:7a:b0:6a:98:e3:bd:62:b0:09:23:3c:
f2:5a:08:08:cc:43:98:8d:ec:1a:a0:bf:9c:1b:20:
a0:82:40:7d:21:75:49:05:2f:a8:15:2d:fa:7a:dd:
0b:75:b3:64:17:c4:89:89:13:09:60:3b:93:16:4d:
e5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55523
sbgp-ipAddrBlock: critical
IPv4:
27.96.24.0/21
IPv6:
2402:7200::/32
Signature Algorithm: sha256WithRSAEncryption
3a:c3:2e:47:be:c8:ce:42:7d:13:eb:0f:07:51:38:aa:ed:42:
2f:bf:5a:ee:c0:58:ed:00:9a:20:cc:2f:3a:a5:11:85:c3:c7:
43:8c:c1:90:f6:b8:2e:d7:17:9d:ab:20:7b:32:27:09:cd:9e:
f5:9b:f0:25:06:f3:01:16:7d:a4:e2:bc:13:e2:b1:69:0f:8d:
dd:b4:71:6a:7b:5f:94:8e:9c:fb:79:07:b9:f9:fc:11:4c:35:
03:2f:ad:3e:91:c0:e2:16:75:f7:b6:43:fb:d2:7c:af:1d:84:
ef:fe:90:d0:86:24:8f:d6:6c:77:de:24:4b:a3:74:5f:d2:5a:
7b:f6:6d:ae:86:3a:fa:62:f9:aa:81:aa:01:e2:01:57:12:fa:
c3:f2:34:db:59:fa:94:93:86:20:31:25:41:04:cc:3f:50:d2:
31:22:31:77:ac:d0:75:3e:7e:22:95:97:dc:14:e6:a1:d0:7a:
a8:a6:aa:55:29:19:bf:bb:e7:1d:5b:ba:ee:db:d4:b1:fb:5b:
94:4b:63:1f:d6:31:c5:ba:52:5e:f6:4d:ec:a6:21:2c:94:58:
5f:83:82:5c:40:13:d2:97:f0:3b:91:eb:4e:91:ab:88:54:99:
36:54:9b:10:e6:e8:c5:72:ad:53:d5:a9:cc:b1:bc:7f:bf:b4:
ea:8a:2a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:32:25 2025 by rpki-client