Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer
File: 556bUhJjfjPKXcthdpCc4ZYhumQ.cer (raw, json)
Hash identifier: pK8cFC2loh5A0UQeOa93raSiHY4JdY2hclKR7sZs3HY=
Subject key identifier: E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4DB1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 03 Oct 2025 21:04:04 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 91.208.208.0/24
IP: 91.208.228.0/24
IP: 91.208.230.0/24
IP: 91.208.233.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 02:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19889 (0x4db1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Oct 3 21:04:04 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A919C47E, serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:93:e4:82:41:e9:95:2c:5c:68:fb:48:d4:
d0:a2:e5:67:87:dd:25:93:16:40:ac:ee:5f:cd:bb:
13:d4:d6:2a:7d:28:8d:a2:61:d7:8c:0e:f6:6c:5d:
f3:61:6d:c2:97:5a:e4:59:54:aa:27:64:c2:ed:23:
2c:7e:bf:75:c2:b5:be:a2:8c:1f:f3:cb:a2:5a:8c:
db:5a:d2:08:6c:53:1c:da:a2:1a:be:6d:16:37:04:
bf:f7:42:bf:04:f8:fa:4b:09:56:7b:22:4e:a9:85:
8f:51:e2:ba:9d:6a:36:52:58:ed:7b:5f:96:b5:41:
60:a8:f3:2f:7b:94:d5:f2:01:0c:16:a5:c0:fd:6d:
2c:3e:23:1a:e3:c4:87:5a:2a:b5:75:5f:71:9e:0b:
73:26:22:30:ad:0f:ba:99:da:f5:71:70:1a:98:17:
47:70:55:28:d6:5f:20:44:92:a8:78:7e:db:7c:1c:
f0:2c:01:27:4d:bb:3e:28:d3:00:91:72:c6:75:50:
75:63:ad:fd:ca:a3:57:3e:cc:b2:4f:b9:47:9e:15:
da:db:eb:16:a3:3c:e1:98:2b:c6:57:38:64:66:87:
8a:58:7e:3f:9a:f9:f7:ad:a5:c8:a2:b5:be:38:56:
b8:3e:9d:39:e1:78:55:fc:8e:be:da:d7:34:6a:09:
25:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
91.208.208.0/24
91.208.228.0/24
91.208.230.0/24
91.208.233.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:ae:e1:13:85:e6:12:81:8d:3f:0f:5e:71:dd:54:da:96:f5:
d9:d1:b4:1d:3c:01:7c:4e:89:31:0b:97:d2:82:c2:9f:7b:f7:
d4:e4:ae:eb:90:be:3a:35:a8:50:fc:74:8c:bd:63:52:dc:74:
e1:76:db:de:79:9b:a3:9b:03:bd:0f:68:62:db:78:5d:34:83:
ce:e0:da:f6:a0:72:90:c8:7e:94:b2:6c:3b:34:73:d2:9a:48:
15:61:ef:15:00:83:d8:3e:aa:62:d0:1b:3a:64:f3:60:62:6c:
dc:1e:91:1c:e8:c3:c4:8a:86:ba:ed:19:0e:90:12:f8:25:ca:
ea:0a:85:60:e1:6a:ce:7b:a3:f4:be:e9:c6:d8:f5:9e:b3:32:
c4:43:49:1e:f4:b9:6e:23:ed:aa:9b:a5:50:d2:e5:7a:da:97:
95:37:f3:e8:a8:8d:b7:28:7b:3c:77:f0:52:9d:e8:b2:18:3b:
50:b5:9a:5e:d3:02:af:22:12:82:62:f7:bf:72:eb:61:fb:53:
81:74:7e:4a:c7:97:ae:7c:81:2a:e2:40:db:b3:45:3e:09:4c:
2b:4b:3b:a4:3c:97:52:12:5c:8e:b0:7b:76:5e:67:77:e0:dd:
2c:2f:7b:b3:d1:50:1e:87:c6:47:23:e5:f1:5d:f1:17:73:08:
a1:47:5c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:46:05 2025 by rpki-client