Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer
File: rIf9aQzGskx4_D9x0y3eDbookNs.cer (raw, json)
Hash identifier: gt5ckkz8Q26Kot9B3yDGEH9/EGsp9+yavHDJ5YiDGIU=
Subject key identifier: AC:87:FD:69:0C:C6:B2:4C:78:FC:3F:71:D3:2D:DE:0D:BA:28:90:DB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023FA9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 18 Apr 2025 03:13:24 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 153788
IP: 163.227.82.0/23
IP: 2401:fe60::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147369 (0x23fa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 18 03:13:24 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A917C156, serialNumber=AC87FD690CC6B24C78FC3F71D32DDE0DBA2890DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:71:13:06:c1:57:85:9c:f6:8b:e2:be:2d:
a3:5c:7a:5c:56:c3:af:c7:68:bd:8d:58:97:77:95:
99:8b:eb:e1:0c:0a:ce:4b:b3:52:cb:09:d0:3f:79:
b5:a3:6b:ad:14:c6:91:b4:dc:18:5a:71:09:74:f5:
3d:f2:b9:be:40:52:6d:c6:8e:57:2a:f4:be:73:07:
26:04:54:ab:fb:ef:3d:81:7f:1d:77:ba:55:4a:a6:
a7:ef:94:d0:04:1b:c4:67:bc:34:5c:c4:41:1d:57:
61:d4:a6:4f:6f:57:5b:a0:ec:67:de:11:7a:39:93:
ec:9c:48:aa:6b:ab:90:5e:93:ae:bd:50:d4:2a:23:
ac:78:99:05:02:2e:51:56:49:d1:56:d2:ef:13:31:
ef:ac:20:71:e0:44:ea:d9:a3:13:cf:db:e4:af:f0:
dd:7d:0a:87:71:fe:af:b6:02:e7:41:b9:d0:57:e1:
0e:31:ca:b3:93:5d:8f:0d:5b:36:ce:dd:20:35:cd:
2c:99:94:b2:e5:81:fa:e2:50:fa:66:75:e4:d8:a8:
4f:65:c3:ae:66:a6:83:b2:67:53:50:98:32:b9:46:
ae:7d:f2:2e:36:7c:2a:af:e0:36:71:2b:cb:08:e4:
01:32:04:b4:23:7d:59:c3:42:56:76:13:4b:9d:54:
7c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:87:FD:69:0C:C6:B2:4C:78:FC:3F:71:D3:2D:DE:0D:BA:28:90:DB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153788
sbgp-ipAddrBlock: critical
IPv4:
163.227.82.0/23
IPv6:
2401:fe60::/32
Signature Algorithm: sha256WithRSAEncryption
d8:8a:da:6c:4e:52:c2:5d:57:60:69:67:86:66:27:4f:f9:18:
1c:9a:a2:47:a6:db:fb:34:d5:3e:0f:08:0e:a1:1f:a5:d3:16:
99:af:b4:aa:e4:a6:cf:28:a0:0d:55:09:82:9c:de:ea:c6:56:
ed:00:31:ef:e4:10:74:35:94:f0:9e:12:b1:53:bc:76:f7:3d:
29:69:19:8f:09:f2:39:f3:f7:03:b7:c5:dd:4a:d9:dd:cf:41:
6e:e2:e9:0e:a7:ec:12:d9:a6:15:d9:9b:5b:7e:8d:d9:97:1f:
2c:85:34:f8:0d:47:81:a6:e4:19:db:c0:2b:0f:c1:ea:ad:b1:
9b:cf:e1:ed:05:fc:56:52:66:54:2b:bd:0b:41:fd:09:ef:dc:
7b:60:17:3e:af:e3:9b:0d:02:7a:09:40:b9:31:5a:48:f7:fc:
77:07:69:89:ba:58:58:ef:67:02:40:a4:f4:7d:e5:ac:8f:cf:
c0:76:64:ec:d0:55:f3:e1:9f:b0:b7:ea:51:38:cf:5b:44:e1:
6d:48:25:ef:18:0b:7d:69:94:d5:86:76:7a:52:46:0e:fc:4a:
3d:df:5d:31:7e:6d:82:3e:66:c3:d2:e2:1d:bc:4b:fd:24:b3:
d5:eb:6f:cb:20:15:9c:be:70:9b:d8:f1:8a:4d:bf:ae:3f:7a:
01:37:3d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:52:17 2025 by rpki-client