Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer
File: EfmPP43U9VzH_7ekusxlbg0ZPR4.cer (raw, json)
Hash identifier: Ct3S07yjYDLqIsFdFM5WYHctuGak5muy2UXgvqk4Jvg=
Subject key identifier: 11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024C25
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.mft
caRepository: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/
Notify URL: https://rrdp.sub.apnic.net/notification.xml
Certificate not before: Wed 04 Jun 2025 05:25:37 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 24322
AS: 24381
AS: 147020
IP: 103.248.50.0/23
IP: 2401:2060::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Jul 2025 02:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150565 (0x24c25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 4 05:25:37 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A9150E4D0000, serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:15:a7:b9:91:9b:d3:c8:b0:6d:3f:26:b8:0a:
2c:40:4c:b9:c5:c5:f1:e8:71:34:a0:d9:aa:0e:83:
02:ea:fa:6d:76:a5:c6:a2:30:0b:93:65:c1:15:ca:
6a:41:30:de:75:ae:3b:eb:81:7f:00:75:bf:8b:83:
75:a2:2f:57:c2:6c:b6:33:80:10:25:64:53:45:e1:
5c:cd:86:19:b4:2d:98:76:49:08:8b:2c:86:65:fd:
c4:16:06:1d:24:0a:1e:f7:88:b7:3c:2d:e7:56:ff:
55:2d:54:4c:1b:3b:b1:7c:a1:4b:2b:11:6d:d0:c9:
1a:30:4f:d8:5f:ca:d4:d9:72:4e:0e:a4:72:4e:e8:
fe:09:74:0c:5b:2a:db:80:58:15:86:bd:68:8f:ca:
c3:61:8c:dc:b5:c3:47:6b:a5:16:57:15:46:c2:84:
ae:76:9b:2b:86:ee:da:b6:f8:7c:e4:62:83:13:81:
14:1d:61:25:be:10:4b:a0:f0:b6:4c:81:39:a4:01:
9e:8f:02:55:fc:67:1a:34:9b:b3:ae:82:66:27:ab:
bd:10:2b:c6:a6:f6:86:43:82:e4:c7:6a:90:f1:b4:
f4:1b:b3:56:51:37:62:44:7a:e7:e7:c2:9d:75:a8:
9a:de:45:c7:41:c6:48:2f:91:a0:10:2d:e0:9f:eb:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/
RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.mft
RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24322
24381
147020
sbgp-ipAddrBlock: critical
IPv4:
103.248.50.0/23
IPv6:
2401:2060::/32
Signature Algorithm: sha256WithRSAEncryption
75:3e:7a:12:26:96:42:0b:c9:5d:1a:de:c1:b0:6f:b2:b4:08:
10:c5:ee:ad:dd:e1:70:d6:4f:4f:df:da:2d:93:b6:8d:6b:73:
ae:03:a4:58:e6:19:4c:a8:1b:8a:e4:19:06:78:2b:e9:f3:0c:
99:57:64:ce:1a:00:b8:3c:39:7f:d7:65:d5:2b:6a:05:c9:d6:
5c:fe:21:60:e9:90:6b:c5:77:bc:da:ff:83:e8:b7:30:40:b1:
d2:52:f7:3e:44:81:a2:50:44:00:46:69:c9:b4:d0:0c:34:2d:
81:62:85:8c:10:4a:8b:68:58:11:e9:dc:93:1b:be:bc:34:08:
9a:47:78:14:01:40:10:01:4e:e3:3c:a0:21:2a:e7:bd:e0:4b:
27:42:c7:29:e4:98:da:17:99:6e:42:e7:68:53:75:28:08:df:
89:06:28:74:8a:83:2c:7e:3d:ad:28:cc:61:05:84:39:5f:14:
d6:f6:0a:8e:f7:12:bb:1b:40:54:d8:ab:00:68:92:1a:fe:05:
67:c3:75:78:0e:10:34:37:f2:7a:cc:af:7d:ad:76:3b:30:a7:
e5:ff:44:61:49:79:a0:50:6f:ae:61:00:1b:bf:99:04:f9:99:
eb:2a:20:21:38:96:5a:2b:d9:a1:25:5e:ad:04:19:54:28:68:
9f:a3:1e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:49:04 2025 by rpki-client