Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
File: wvKOnRiEOcT-afY6TKptpCSWKR0.cer (raw, json)
Hash identifier: tQ9legDzDA5tZacbDTNSFsOTINo6YdC54Rjp3fuZaNI=
Subject key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024DC0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 12 Jun 2025 07:15:19 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 59117
AS: 135074
IP: 103.135.208.0/22
IP: 103.172.110.0/23
IP: 103.204.13.0/24
IP: 203.168.128.0/22
IP: 2001:df7:6e80::/47
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150976 (0x24dc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 12 07:15:19 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:9a:3c:c8:ac:01:78:6b:84:a3:b8:48:e0:
a0:20:c8:ed:64:4c:b0:c9:66:d5:99:bb:d0:46:6c:
cc:43:1e:bb:28:49:9d:cf:86:ad:7f:e2:2e:1f:bc:
59:93:9c:1c:c6:93:5c:b1:3a:ef:85:0e:31:a5:89:
93:5f:93:a7:c2:fb:2f:b4:33:79:a4:e3:ff:35:dc:
da:8f:e3:4a:0f:3b:d2:f8:a8:a3:bd:39:84:96:30:
cc:6f:2d:58:af:8a:ac:6a:41:2e:1d:90:f1:27:f7:
fe:f7:31:8e:0d:e3:f0:c2:99:2c:76:2f:b5:9c:bb:
7d:b8:88:c6:5b:12:a5:ff:ed:1e:80:1a:10:d5:8e:
8e:43:84:50:25:d1:46:0c:d8:e1:82:fc:e2:45:55:
e1:48:3f:f6:8f:4f:f3:c5:8a:d1:1e:83:72:ec:dc:
3a:b3:72:bd:dd:2d:a7:c3:de:6d:35:99:42:d6:de:
d6:82:f2:49:0e:f0:71:b3:df:b2:8f:37:41:3b:11:
ec:7f:a9:2e:70:99:66:4b:01:9d:01:09:f9:1d:9b:
cb:0b:ed:31:8f:33:0f:44:ae:3d:c7:01:6d:1e:85:
13:96:16:63:4a:88:b7:a5:39:ee:99:47:ec:6b:b3:
52:33:16:31:23:de:e2:a4:c9:a8:01:ce:13:05:32:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59117
135074
sbgp-ipAddrBlock: critical
IPv4:
103.135.208.0/22
103.172.110.0/23
103.204.13.0/24
203.168.128.0/22
IPv6:
2001:df7:6e80::/47
Signature Algorithm: sha256WithRSAEncryption
b0:d8:0e:80:a3:cd:53:9a:dc:82:ca:ce:75:d4:02:93:3e:e6:
54:6e:61:a7:dd:d2:b0:7e:89:4f:33:10:04:de:4b:40:23:30:
c9:72:4c:eb:14:98:b2:90:66:92:34:ae:19:dd:6c:09:de:a2:
47:30:82:04:64:17:c1:92:9d:7c:27:91:80:cc:e1:11:a6:37:
56:49:8d:35:d4:8e:77:81:22:7d:eb:cd:81:be:1c:4c:48:47:
59:07:d5:8a:24:1f:89:b9:56:fe:8b:a9:0a:59:92:10:f5:eb:
2f:27:00:5d:85:a9:e2:f3:8a:82:94:ae:3a:d8:8d:3f:6a:97:
00:0f:55:9e:85:f6:2c:5c:4a:a9:75:b4:a0:b4:50:b2:aa:88:
b5:ea:55:2f:3d:a9:d0:d6:28:c7:81:9a:ca:74:79:a4:3e:4b:
07:bf:4f:33:63:45:08:0c:d5:56:2c:71:d4:8a:58:be:a9:93:
a1:8f:bd:f5:aa:92:9d:d6:96:f8:0f:0a:5e:5e:d9:cc:35:0c:
cb:97:9c:c1:b0:b1:bc:b2:66:e0:63:6f:44:25:67:89:5b:90:
7c:16:41:57:f9:e0:0c:a7:d5:44:ad:04:61:65:9a:c0:dd:66:
f8:01:fa:d9:9a:43:7d:6d:e7:7c:84:f6:3b:69:1c:b8:ec:e2:
30:a7:c0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:33:29 2025 by rpki-client