Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVykEPC8_6LEyIu2QkHBtuBZb-k.cer
File: wVykEPC8_6LEyIu2QkHBtuBZb-k.cer (raw, json)
Hash identifier: 3hNoeoBHF6ruGCvQIkg0TPg81LkQsB8yi86USpAD6kw=
Subject key identifier: C1:5C:A4:10:F0:BC:FF:A2:C4:C8:8B:B6:42:41:C1:B6:E0:59:6F:E9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024901
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 27 May 2025 17:07:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 142021
IP: 103.165.48.0/23
IP: 2001:df6:5b80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 16:13:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149761 (0x24901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 27 17:07:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91906A1, serialNumber=C15CA410F0BCFFA2C4C88BB64241C1B6E0596FE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ff:bc:25:65:d4:f4:25:70:9a:e1:a8:2a:1c:
a1:ea:3c:e7:59:17:25:82:76:c6:df:cc:b5:0d:0f:
cf:bc:c0:37:b9:e2:4b:cd:30:66:65:0b:36:f6:e7:
8f:f4:c1:49:c0:38:c8:fc:34:9c:a1:ce:86:a3:8b:
77:71:ec:e5:71:6f:0a:bc:2b:80:98:a1:5d:77:34:
21:81:05:9e:0a:f7:dd:5c:95:c2:a2:9c:4e:e7:2e:
bd:3c:c3:b9:eb:97:e6:64:e6:b1:33:a8:a9:f2:f7:
3b:e6:4c:7a:8d:9d:ca:25:89:1d:69:e2:67:67:b9:
3f:de:42:fc:26:2f:b0:87:5d:07:b0:16:a6:5f:4b:
64:e4:b4:f1:d8:ef:15:f8:26:2b:d8:a1:8a:80:1c:
a4:b6:34:b2:1d:88:67:7a:99:4d:bc:77:c9:9b:2d:
5c:cb:97:06:4a:0a:d0:ef:3d:90:13:6d:44:87:50:
82:fd:70:be:bc:c5:53:66:b7:4a:7e:9b:eb:0e:70:
d1:87:25:32:93:f4:b4:e7:55:76:7a:3d:69:3e:a3:
8c:83:15:36:01:12:d9:64:df:be:fb:f0:00:a7:63:
4e:61:8a:d1:64:d0:28:1c:1e:4e:f8:76:99:94:e5:
cb:1d:2b:3d:dc:44:5a:6c:15:0b:69:ab:3e:8a:f8:
d3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5C:A4:10:F0:BC:FF:A2:C4:C8:8B:B6:42:41:C1:B6:E0:59:6F:E9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142021
sbgp-ipAddrBlock: critical
IPv4:
103.165.48.0/23
IPv6:
2001:df6:5b80::/48
Signature Algorithm: sha256WithRSAEncryption
94:34:c4:b0:df:26:a2:d5:48:1a:be:96:53:d5:68:08:23:5f:
09:53:70:7f:16:8b:b7:57:bd:d5:b6:bc:8d:8d:74:95:1f:6e:
65:88:7e:e0:45:c1:ee:a4:e1:32:d6:0c:a1:c3:b1:b5:d3:b5:
10:48:42:8d:c6:e1:96:b4:28:e9:9c:d2:40:e4:66:bf:02:30:
92:f8:69:3d:91:ae:da:4f:ef:6e:80:6d:15:61:ed:56:e4:26:
ea:fd:9c:f1:af:a9:c9:a7:c9:c6:78:6c:c3:12:d3:2c:00:7c:
0b:3a:9e:64:7a:1b:a5:55:2f:4d:c4:46:f5:07:bf:13:37:03:
ba:2a:75:af:a6:7d:f3:ad:12:f6:8f:cd:ec:7e:76:06:9f:8b:
f6:a4:da:d3:20:5a:19:79:0b:3b:b7:e1:8f:0b:7e:33:19:32:
4b:16:4d:ad:6b:f2:93:84:c5:f1:cd:c2:c2:15:be:06:18:b9:
b7:8c:38:28:99:d4:94:16:ac:c9:12:37:62:2f:38:72:db:c2:
98:df:d8:4c:7d:1d:83:7f:49:8e:21:ba:04:30:9c:66:80:7d:
39:ae:a2:c5:53:f5:a4:3c:de:f2:12:0c:5d:9b:3c:d3:4f:97:
59:3d:79:fb:9f:e4:cc:16:46:7c:dd:b7:cc:70:5b:6c:59:7f:
ab:be:13:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 14 17:59:43 2025 by rpki-client