Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wr0cxLfFL-ROszd3wzcPTwV6mA.cer
File: 6wr0cxLfFL-ROszd3wzcPTwV6mA.cer (raw, json)
Hash identifier: JLMMRq/0Hr6WVFR+GGhORHKfpjmqsD68h2piAOdL+/Y=
Subject key identifier: EB:0A:F4:73:12:DF:14:BF:91:3A:CC:DD:DF:0C:DC:3D:3C:15:EA:60
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0251D6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Jul 2025 02:18:39 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 151367
IP: 103.212.162.0/23
IP: 2001:df2:87c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Jul 2025 08:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152022 (0x251d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 1 02:18:39 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91BF119, serialNumber=EB0AF47312DF14BF913ACCDDDF0CDC3D3C15EA60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:26:a3:35:23:62:33:e3:01:2a:e1:af:b5:21:
f0:a0:c4:25:2d:02:83:db:6b:63:e2:33:ce:00:a9:
81:bd:6c:6b:1f:b1:fd:e0:ee:d3:ce:5a:dd:10:ad:
37:9b:2d:cb:8d:62:e4:8b:c3:fd:66:e1:c0:05:fc:
26:17:28:14:95:c6:fb:cb:ed:35:ac:d0:17:b4:66:
43:c5:c5:a2:6b:79:4c:07:82:71:aa:82:a7:09:d3:
e6:95:ec:7e:dd:25:4d:da:cf:94:f0:df:a1:8e:fe:
0a:54:6b:c0:2d:ed:76:a7:f8:2d:69:f5:e6:ad:0b:
66:46:2d:f6:c1:25:0d:a5:fd:ff:7c:8f:c1:6e:a1:
22:17:92:07:75:8a:f4:47:78:b2:10:f2:37:ba:3f:
f3:eb:b0:ad:3e:30:7c:c3:90:aa:aa:f2:c6:f9:5e:
ac:8f:34:6b:ed:ef:3c:33:25:73:2e:3d:ee:18:f3:
bd:0a:ae:1b:4b:8b:53:4d:58:62:59:e4:fe:46:63:
bb:dd:d1:ed:fa:0a:e2:e9:a6:87:b2:71:27:5a:6c:
18:fb:5a:35:be:42:71:32:7d:7c:22:75:4c:3e:0e:
42:4a:35:7f:c4:55:30:e3:18:10:fd:f2:9d:e3:66:
a0:25:e3:6c:cd:a6:ae:1f:35:de:45:ee:de:81:7c:
3c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0A:F4:73:12:DF:14:BF:91:3A:CC:DD:DF:0C:DC:3D:3C:15:EA:60
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BF119/94A29734092211EEB977066CC4F9AE02/6wr0cxLfFL-ROszd3wzcPTwV6mA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151367
sbgp-ipAddrBlock: critical
IPv4:
103.212.162.0/23
IPv6:
2001:df2:87c0::/48
Signature Algorithm: sha256WithRSAEncryption
b1:d4:19:3d:9b:28:3f:2c:19:cd:0f:e5:19:f5:5a:26:59:80:
47:1d:72:7d:82:5c:ee:46:2b:b1:26:95:f6:97:81:dd:54:54:
a9:b8:de:0a:35:90:e7:81:1e:c6:c9:69:d9:be:81:02:9f:30:
1c:81:33:74:49:91:f5:21:d4:0f:87:ab:c0:a4:d6:5a:7d:5b:
3b:6c:54:35:9a:dd:52:9e:bf:ad:98:a0:0d:fd:59:c3:2d:52:
54:cd:ef:9e:72:70:53:6f:63:ed:02:73:e8:83:ea:69:54:f4:
6e:15:8f:28:9d:46:ea:2a:b0:55:71:5b:6d:be:63:1b:f9:98:
96:c9:ac:fb:7b:94:14:3b:7b:89:62:ae:ed:45:8a:68:a2:1a:
93:7a:8a:b5:3f:47:f7:b2:e6:16:43:d9:7e:99:e6:94:ff:97:
16:eb:5b:fe:77:10:db:df:42:53:ca:e8:b8:dc:21:20:a3:3e:
b7:d0:96:c4:a5:2f:0d:b8:f3:12:14:e8:10:f3:f5:aa:67:50:
da:89:a1:e0:a6:ca:b9:35:d5:f5:76:d0:22:06:01:84:7c:ff:
e0:2b:5a:0c:72:92:68:1d:77:35:7a:89:2c:04:c6:7c:c9:52:
cc:67:53:60:fc:18:71:d5:42:9a:13:ec:4a:02:9e:fc:25:82:
b9:6f:ec:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:47:59 2025 by rpki-client