Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
File: 7D2Af3k8nPX84zXuFeCYREm0MJY.cer (raw, json)
Hash identifier: oKYcO4jwVv/Abzr4nCWTa4OPV74Qdc92TGMQ+oTzm9g=
Subject key identifier: EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0242E9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 May 2025 06:20:49 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 18219
IP: 203.34.237.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 May 2025 12:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148201 (0x242e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 1 06:20:49 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91517CF, serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:df:35:69:ce:de:80:6c:27:6d:94:72:52:
cd:66:c3:5c:c1:77:aa:3e:5b:61:50:e7:94:b4:da:
19:c0:0d:12:65:1f:95:ba:f3:dd:23:8d:e1:aa:6e:
e8:26:f1:6e:c0:fb:fa:4f:0c:63:83:f1:e7:2d:d5:
0d:02:4d:83:03:50:23:09:82:c2:31:0d:ac:79:f1:
44:67:88:79:d4:7d:bf:b1:f8:6c:e9:18:e4:bc:e5:
e8:aa:89:a7:96:dd:7b:a0:53:bc:6b:49:c2:4b:12:
31:d9:f8:46:c6:bd:76:58:4e:48:96:1d:06:63:4b:
e4:81:d2:fe:e2:c5:33:c0:39:2f:d0:d5:33:86:ec:
f7:3c:4e:5d:1f:7d:7b:37:fe:a4:9a:c8:d4:b3:52:
be:b0:99:3f:bc:70:f8:e6:1f:05:10:f0:f0:55:6d:
e5:f9:a3:1d:55:c8:3f:06:52:73:85:01:3e:53:a9:
ce:20:aa:a1:a6:10:88:53:28:e4:09:86:cd:18:83:
d4:f7:12:0f:d9:b7:8c:7d:e6:20:d1:71:01:b6:86:
29:64:a9:69:23:bc:08:70:22:7d:79:d3:24:22:86:
73:65:71:b3:be:92:26:ec:6a:04:e4:1f:1b:c4:58:
d6:6a:6e:9f:87:10:5d:f0:20:d1:1a:82:fa:d7:d7:
64:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18219
sbgp-ipAddrBlock: critical
IPv4:
203.34.237.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:62:fe:ee:38:d0:ed:7e:13:1f:a0:51:21:a8:b8:22:7a:5a:
54:ab:47:d3:ee:64:83:e4:fb:f5:82:6a:c6:26:1a:b9:ba:40:
03:52:f0:ee:de:15:d9:77:80:e3:84:77:bc:80:88:35:a4:df:
2f:ac:68:75:51:df:64:b1:1d:06:78:84:b1:5e:7e:07:17:63:
68:c7:50:24:09:82:c4:dd:57:24:1a:d5:68:59:26:cd:86:f8:
16:66:de:a8:8a:42:5f:91:87:8a:34:04:52:f4:28:e5:f8:01:
3b:6b:7e:e5:d1:4f:f5:85:c0:de:8d:12:17:bf:43:f1:8e:42:
13:fa:1a:fa:eb:af:18:b2:aa:da:99:01:4e:88:18:e3:1f:26:
67:18:fb:23:cc:e4:c0:9f:64:dd:75:6d:93:3e:db:2c:a2:b0:
ed:f3:ce:dd:d5:1c:5a:c1:32:bc:cc:9c:51:5a:e7:fc:7d:b8:
1e:e9:0d:62:fe:1a:41:d4:02:fe:ba:84:34:8e:b7:b4:58:57:
1a:18:06:cf:5c:59:4e:9e:58:08:e5:f4:2d:33:64:28:ca:85:
0d:b2:94:b6:10:bb:1f:16:cb:ef:b8:e1:bb:32:23:3f:13:70:
51:6b:61:ae:9d:04:04:96:57:13:67:02:98:09:f0:13:8f:75:
61:d0:c0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:16:17 2025 by rpki-client