Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
File: 8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer (raw, json)
Hash identifier: IK8ilEO5uhbJA2osHJYlEiJ9wedZMD1OoXxAy2h/Rks=
Subject key identifier: F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025082
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 26 Jun 2025 14:39:47 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 203.34.177.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151682 (0x25082)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 26 14:39:47 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A914992A, serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:9d:c7:14:31:b1:59:2b:1f:83:44:1a:cd:
1a:ef:44:28:01:0e:70:83:fa:33:ec:7a:74:45:68:
05:44:fe:f9:6c:8d:51:29:0e:96:07:06:7c:b8:12:
7a:e0:96:23:5d:d0:97:5a:6b:9d:09:db:6b:d6:5e:
ba:82:2e:19:01:70:a8:3d:e4:1a:c9:f0:13:b0:da:
c1:37:96:06:46:6b:f2:11:51:e3:27:84:0b:3d:e0:
81:7b:2f:59:d4:f7:bc:17:96:fd:bb:d8:59:e7:43:
00:75:ea:13:04:19:46:22:5b:da:9b:d1:f3:dc:5b:
fb:9d:28:a5:85:8a:e8:0c:e9:7b:04:9b:8c:ed:ed:
03:54:0d:b4:01:02:6a:84:71:85:3e:ee:7a:66:ae:
aa:e6:0b:a4:bc:17:ad:fc:f0:21:84:17:e5:e4:7c:
aa:f2:e5:0a:cb:c4:3e:b4:17:3b:24:b7:18:aa:07:
75:53:aa:1a:10:1e:37:9b:d3:02:ce:63:f2:09:ea:
93:c9:59:6c:b0:89:c6:50:f6:b0:6f:1a:62:61:6e:
9c:47:01:00:a2:27:d3:50:f9:b3:3f:ef:65:4e:7e:
c1:32:36:49:3f:3b:25:ea:49:64:c2:0f:1f:4e:b5:
75:1c:80:ec:ad:2a:4f:be:83:5e:98:c9:d8:bf:c0:
de:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.34.177.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:5f:d9:96:2f:2f:a6:5a:23:95:a9:b6:ff:61:30:6f:7c:ce:
b5:60:b4:a8:26:77:2f:53:cd:7f:ed:be:25:68:22:3e:87:3b:
1b:a9:69:02:92:72:a0:ce:86:a3:8d:58:be:06:20:cc:d6:36:
46:2a:9f:10:11:e7:e6:c4:c4:df:c3:10:97:d6:c1:fc:ae:fd:
f0:b8:03:79:37:0a:f7:25:00:a2:3c:3f:f0:40:53:cb:ef:87:
ae:e4:34:e9:fe:7a:60:64:e1:88:f7:3d:c9:69:cd:8b:1e:d9:
4c:77:3b:1b:b8:86:b1:0f:61:49:89:f3:ae:77:51:76:43:cc:
85:ce:2d:50:88:0f:4b:25:ee:65:62:5b:4f:e4:f9:0e:59:f1:
d9:3b:09:00:91:e2:c8:98:1e:61:1e:6d:2d:c1:d3:31:a0:56:
c0:8c:b4:7a:26:11:47:1b:59:98:cc:ad:07:1d:1f:18:b5:83:
b3:2d:95:f5:5c:1a:67:2c:f2:a3:2b:36:6d:76:99:99:63:2c:
46:19:78:20:d3:3e:06:83:5e:2d:67:05:5b:a0:e2:b4:52:c0:
99:20:38:bf:15:f0:76:d4:f0:ac:3c:a2:03:4c:3c:0b:c5:bc:
c1:61:ad:9f:b8:ad:9f:f8:44:ee:22:f8:ca:35:90:ca:84:ce:
f8:7b:17:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:40:28 2025 by rpki-client