Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
File: raez5kKEQOUk2gaDhqHt8yH4gR4.cer (raw, json)
Hash identifier: DvJcN4ixf+ggNk9q1i4vjcWcJuDKfQo9uFxkx34Toss=
Subject key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024D0F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 09 Jun 2025 03:12:50 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 203.99.64.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150799 (0x24d0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 9 03:12:50 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91D7103, serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ec:6c:7d:cc:3d:ec:71:f3:6d:23:3a:5e:77:
98:c5:9f:46:a4:62:1a:39:c6:75:da:b2:43:78:db:
34:57:72:e1:48:b5:31:94:ce:65:05:25:4c:11:07:
2d:d2:9e:ec:30:f8:00:ef:47:0d:38:3e:40:7c:91:
eb:ef:8a:7c:b3:cb:7d:1c:94:eb:19:c5:cd:5b:04:
d1:84:68:a7:3e:ac:67:25:ed:e5:46:4f:de:cb:7d:
10:e7:87:12:2a:19:9c:57:7f:99:b0:ca:42:3a:5b:
4f:f6:fc:3c:56:22:d5:6f:20:85:87:e9:d2:62:84:
e2:d1:81:a2:66:5d:15:b3:98:68:49:ac:3b:60:2d:
89:c5:e9:68:ac:ae:81:a0:c3:65:bb:79:65:1a:18:
91:2b:46:1a:58:9f:31:3b:ea:e7:5a:99:46:d8:b5:
17:70:40:76:86:ec:e4:e5:44:57:ae:d4:ad:b2:d4:
9f:26:3d:63:74:a7:72:a5:4f:02:bf:80:8d:77:9f:
fc:22:0d:9f:35:39:a8:f6:ff:73:f2:02:62:85:9c:
9d:2c:0c:55:6f:a7:54:09:6a:e9:20:5d:11:23:1c:
6e:8c:64:db:35:89:f8:1c:6c:6a:3a:e3:5c:96:8e:
21:eb:45:9d:16:91:c1:65:56:7d:ee:f4:c5:7b:14:
3c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.99.64.0/21
Signature Algorithm: sha256WithRSAEncryption
67:8b:89:f9:3c:bb:f7:81:98:f1:2b:ca:02:f7:0a:eb:ac:5d:
09:cb:80:25:53:61:50:d6:8f:90:cf:69:de:c0:05:8f:92:8c:
f0:ab:d6:2e:a3:ee:e2:38:30:c4:4c:a1:ec:db:55:22:b3:5c:
fc:4d:a9:35:cb:36:99:76:11:f2:d4:ae:fc:98:3f:3a:35:e9:
b9:f7:e1:ff:a9:5f:aa:2e:bf:60:b7:bb:d7:4c:b3:85:fb:df:
5a:f8:44:ff:83:52:29:a1:06:41:ac:a8:ce:9f:27:80:4c:03:
ee:d8:e6:a2:ce:53:92:54:db:ca:57:3a:6b:6d:1f:84:ca:34:
c4:66:4b:a7:ca:58:97:8d:b2:c9:e8:f2:73:5e:df:fd:42:06:
5d:b8:71:0a:df:08:48:3d:f4:49:4d:0e:7f:46:7a:04:fd:10:
e3:a7:ba:83:da:6b:62:06:b3:51:e0:e8:42:f1:fa:ea:bc:76:
8b:ad:69:72:a1:cb:b7:53:a6:83:2b:e6:a1:d8:b4:cb:2d:28:
06:05:59:54:09:4d:07:34:2c:63:ef:26:f1:61:c2:ab:d2:0f:
64:c0:c2:e3:fe:d3:29:b9:f7:0e:48:5c:ea:f2:5c:6b:1d:91:
f2:46:e1:d8:ab:7a:93:3c:14:64:2a:ea:81:1c:f6:05:c2:dd:
17:fa:b8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 04:58:10 2025 by rpki-client