Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer
File: 3HVZ7loiUGA5czj8qjgD_6pLI1c.cer (raw, json)
Hash identifier: meTRjucNZbOQ9ZlSj8qMnAfmS3VC1alYaZp3AVYT9fY=
Subject key identifier: DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0242E3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 May 2025 05:38:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 132158
IP: 114.30.64.0/21
IP: 2400:8c80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 May 2025 18:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148195 (0x242e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 1 05:38:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91FA56C, serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:f0:ec:6b:0e:62:dc:86:e8:42:ab:6e:af:
92:65:b6:6d:89:6a:9c:2b:1d:0d:6d:40:5f:11:ae:
b1:0f:61:c0:8f:f5:7f:2c:08:3b:ff:82:5d:2b:12:
e0:84:1c:fe:c0:36:f0:2d:c0:f7:68:f4:b7:48:d0:
ca:df:54:d0:8e:d2:db:dd:5b:44:de:35:87:c2:90:
72:d5:84:30:79:fd:86:44:42:37:98:76:0f:a3:0d:
92:ba:0b:b6:b7:8d:cf:63:4d:13:c6:46:dc:f0:66:
5f:c1:cf:ad:18:a1:a1:92:03:bc:90:3c:d7:94:30:
49:c0:f1:bb:65:ca:48:97:31:7e:ee:a7:11:19:0d:
98:ce:77:39:bd:20:39:71:c6:2d:f3:37:30:81:1b:
a4:0a:23:1e:fa:50:a6:dc:82:23:57:26:63:17:a8:
b3:48:42:e2:9f:8c:1a:03:67:cf:af:86:0c:25:f8:
14:5c:1c:e3:d9:33:a7:bb:58:17:90:08:c7:2e:e8:
5e:f7:59:e2:70:f3:44:3f:05:d9:29:c2:5a:4a:81:
23:29:9d:66:d6:2a:2b:fb:75:df:82:f1:47:71:0d:
a6:2f:8d:94:f3:38:8b:50:01:db:df:7b:8e:d3:f4:
fd:66:64:b3:98:3f:56:70:06:fe:6a:9c:5a:64:29:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132158
sbgp-ipAddrBlock: critical
IPv4:
114.30.64.0/21
IPv6:
2400:8c80::/32
Signature Algorithm: sha256WithRSAEncryption
26:23:8b:8f:cc:b1:54:c8:69:e1:b6:da:b5:6c:5e:fd:63:a1:
a3:91:a1:9b:53:65:ca:f6:9b:79:39:bc:e0:48:dd:35:5b:c8:
bf:d9:88:9a:1e:bb:ad:b1:e9:88:2a:81:5f:69:7a:d0:2e:a7:
53:b0:a8:59:ec:91:62:3d:a2:7f:db:fc:e9:08:41:c2:c1:f9:
9f:9a:8c:e7:b7:50:79:2f:ae:60:c1:5d:43:bd:6f:f9:57:7a:
f7:62:2b:2e:aa:ec:61:37:51:12:77:27:fe:30:c4:27:87:3d:
92:05:77:4f:47:20:af:d4:8e:58:5a:cb:18:d4:c5:c4:aa:72:
3b:86:2c:ac:df:63:07:7c:f5:ad:43:a5:6e:b0:90:0a:d0:a0:
3f:2b:66:8f:52:93:38:04:79:b3:48:5d:f7:72:ea:13:5a:80:
e8:6b:48:ef:a4:6b:b6:a1:7e:a8:9b:d8:9e:9a:43:55:a9:11:
ea:73:82:ba:1d:9d:95:e5:96:62:6e:76:a3:56:05:15:28:e6:
e1:7f:0e:e6:45:da:e1:c8:a7:7b:c2:01:5e:3a:f0:74:57:a2:
b9:e0:b7:a6:e2:86:c5:14:d7:f0:67:fd:3c:29:4f:0d:37:63:
c9:0a:27:ce:fa:9d:50:92:cc:94:fb:1a:ac:d8:58:28:d2:23:
6e:dd:e5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 22:29:56 2025 by rpki-client