Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer
File: scWMB4UVntc2lq-zEtI1z0DzxEE.cer (raw, json)
Hash identifier: hVRiQ7MCTMeC9iJojZhcoUTO7mPdJ/d2UZw4CxUZGR8=
Subject key identifier: B1:C5:8C:07:85:15:9E:D7:36:96:AF:B3:12:D2:35:CF:40:F3:C4:41
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024C16
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 04 Jun 2025 03:51:31 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 9792
IP: 203.1.240.0/21
IP: 2406:11c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150550 (0x24c16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 4 03:51:31 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91D6DBD, serialNumber=B1C58C0785159ED73696AFB312D235CF40F3C441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:c5:1a:7c:7f:27:55:23:7c:ce:3c:13:3b:
1b:0e:60:d7:f2:48:54:96:fe:5d:4a:86:e8:55:65:
54:8c:09:99:da:42:2f:87:5f:9c:12:cc:91:75:18:
83:6c:ed:5e:67:45:8c:b5:18:10:fa:61:69:47:e8:
14:03:52:5c:33:8a:a1:c9:ad:6d:1c:58:62:dd:a5:
ab:e6:21:91:db:d2:fe:e1:57:02:e3:bb:ef:64:a3:
d3:85:a7:2e:97:ab:b7:67:ec:aa:06:eb:54:ba:9e:
3a:3f:92:99:bc:75:bd:b4:45:79:10:86:1b:09:bf:
83:1f:a3:1d:a3:33:2e:5e:d8:8f:03:c6:e2:55:1c:
b8:30:5d:c0:57:77:90:22:10:60:d7:7e:20:15:9c:
49:11:16:9e:c5:0e:22:62:93:52:62:93:54:3a:dd:
d4:3f:9a:c5:58:1f:ad:e7:d4:08:01:3b:32:f4:27:
a1:a7:cc:15:fc:5c:02:04:64:d6:f2:ac:ef:91:09:
ef:12:d8:6a:34:a4:5e:18:7c:5d:6f:f1:df:ae:6e:
6c:bc:d7:d7:f0:c8:60:93:49:d6:27:a3:b8:d3:c7:
47:a2:b7:59:a1:51:97:e9:fb:78:1f:77:30:47:09:
de:a2:3e:f3:85:d4:93:cc:82:a5:de:34:a1:4d:2d:
66:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C5:8C:07:85:15:9E:D7:36:96:AF:B3:12:D2:35:CF:40:F3:C4:41
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9792
sbgp-ipAddrBlock: critical
IPv4:
203.1.240.0/21
IPv6:
2406:11c0::/32
Signature Algorithm: sha256WithRSAEncryption
b6:9a:f7:7e:67:b8:a7:76:11:2d:41:25:5c:4a:39:fe:79:cc:
48:c1:63:ad:18:35:7d:33:e5:f0:77:10:64:ed:42:e6:2f:97:
e7:2e:37:f4:40:0d:28:c3:27:62:87:7b:5e:d9:79:64:b3:fc:
fd:cf:13:66:f7:9e:fd:f2:d2:fe:42:26:0a:34:49:e0:00:3c:
fa:ce:b3:a9:f2:61:94:29:c2:91:43:39:c2:46:11:00:d8:59:
36:f7:ed:fe:dc:83:e8:c0:62:62:70:aa:77:df:56:dc:ed:bf:
d2:dd:6f:dd:76:61:3c:c0:22:0e:0d:7c:10:66:bf:91:41:0d:
c4:fd:3d:be:9a:73:b4:8a:a7:50:58:0c:12:8c:62:b8:78:7b:
b9:52:b7:5a:d3:86:e0:fc:1c:38:8f:84:0d:ef:bf:a2:4e:8e:
c5:33:3a:12:39:30:c6:ac:4e:cf:0b:b3:72:09:48:8a:4e:e8:
47:a7:c0:b8:34:85:d2:14:4b:7d:26:40:10:50:10:fb:83:09:
cb:e9:d6:c6:8c:17:84:32:cc:1d:3b:26:3e:4a:6e:61:98:87:
54:e9:ab:be:16:1b:6b:ee:37:c6:f1:bd:a9:84:ff:45:e6:14:
5d:64:d6:d2:3a:22:68:e0:6f:d0:85:11:68:6d:e5:57:84:3b:
11:cb:e5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 04:56:41 2025 by rpki-client