Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
File: rLLFTvC2TcIQCkhqe49ZMkute0k.cer (raw, json)
Hash identifier: PzjYmt+ePgdFPR8cger9GbE+BAdZsR1aR0eT2VaZGMU=
Subject key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024D79
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 11 Jun 2025 03:26:37 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 142132
IP: 103.166.174.0/23
IP: 2401:b0e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150905 (0x24d79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 11 03:26:37 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A9185673, serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:97:f0:a5:fa:6a:3d:ef:ff:4c:18:76:d6:2d:
73:c4:2a:db:7d:95:d5:f1:e3:36:e4:6b:8b:9f:27:
65:b4:2f:99:8b:53:fd:c9:ad:e8:19:b2:84:75:f6:
16:84:01:51:ef:ff:2d:bc:6c:15:8b:bb:ff:de:29:
28:f1:ba:e0:2e:9d:2e:74:8b:4a:32:53:eb:51:89:
09:0b:b4:96:3e:e2:23:74:91:3e:e8:75:8c:7b:3d:
e8:c0:5a:81:1f:9e:5c:4e:3d:bf:ca:5d:76:b9:2f:
e5:0d:ad:6b:71:de:1d:51:0e:03:b6:fb:d1:d1:cb:
92:5a:68:e5:7d:a4:62:0b:e8:6b:dd:c1:fc:79:44:
5c:d5:95:c4:3b:e5:ad:cb:34:2d:07:8e:a6:54:76:
fd:a5:7e:95:1c:79:af:89:e6:94:ac:70:d2:2c:57:
ed:c7:71:69:19:ab:42:0e:03:2e:e4:42:ae:ca:2f:
92:5c:0b:f9:d2:52:7f:11:83:e2:01:e3:63:22:a7:
27:d0:70:c4:e4:59:97:5a:ab:a9:a9:9a:05:11:18:
36:c3:80:42:78:c5:69:27:05:07:2b:ce:d3:d8:c2:
34:23:97:c1:e4:71:fe:76:c5:56:84:89:e1:82:20:
40:af:79:a0:7a:d6:12:14:7c:b1:a4:f4:46:2c:11:
a1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142132
sbgp-ipAddrBlock: critical
IPv4:
103.166.174.0/23
IPv6:
2401:b0e0::/32
Signature Algorithm: sha256WithRSAEncryption
2b:8b:12:4d:76:02:cb:25:1b:b6:e5:f3:57:27:82:86:25:f0:
8f:5a:4c:1d:e1:1d:eb:4e:aa:4f:99:37:a6:c9:a7:46:69:fe:
3a:ef:26:3c:66:73:59:07:ea:ea:f1:56:f5:e1:e1:c8:7a:fe:
b4:29:f5:1c:c8:d8:84:58:fb:62:07:f0:29:07:28:8f:88:1d:
79:ab:b8:ce:13:99:35:19:49:d0:28:a6:fc:ce:09:5f:59:91:
7a:10:b3:94:c4:b6:3e:b8:30:94:3a:3a:a4:3f:57:cf:23:d6:
0d:e9:df:90:57:c6:1b:52:fa:36:c3:08:61:39:f8:3b:69:13:
5e:4a:b8:e7:f2:3f:8e:54:46:b0:d1:2d:a9:c5:bb:2a:df:ba:
48:a5:08:33:79:f0:e2:b5:df:3f:e8:bd:da:7a:18:17:82:fc:
eb:7e:32:a4:15:02:fd:0f:c9:28:ef:6e:ac:b7:24:a3:91:e3:
c2:84:2f:58:19:f9:5c:e2:91:86:fb:d5:d1:da:e2:bc:51:a0:
33:a4:79:77:fe:17:66:58:fe:b6:48:33:92:31:a8:dc:49:03:
08:22:a8:cd:5e:ae:46:03:cb:90:27:e5:9a:10:19:56:d5:f1:
26:e6:29:3c:77:fa:7a:5c:c1:c7:8f:44:05:bd:8f:b0:19:cf:
91:4c:94:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:36:35 2025 by rpki-client