Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
File: FggPXxr0qlYST_cZXRPoW5OllSE.cer (raw, json)
Hash identifier: jwEAx+lpLUh5/mVVCFNQoIOfcQuaaXp9boQj7xFEI74=
Subject key identifier: 16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02432B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 May 2025 22:02:01 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 142422
IP: 203.16.0.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 May 2025 18:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148267 (0x2432b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 1 22:02:01 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A9193267, serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:08:90:a3:dc:c7:ae:29:30:fe:88:99:1f:
b1:ea:69:ee:0b:6c:fc:ae:8c:5d:c1:74:95:0a:3f:
61:1d:d1:29:2f:89:93:f6:41:a9:75:4d:46:28:7c:
f0:1e:81:6f:39:d7:92:38:39:51:b9:f5:4f:21:71:
9b:c1:29:9c:6f:f8:21:40:d4:38:ce:14:56:2e:cb:
11:0b:1b:16:17:5f:29:3a:8d:6e:8b:ae:b1:1c:1c:
e1:5f:2e:72:27:23:43:7c:96:fa:42:d0:a0:40:c1:
e2:72:ba:e0:b5:2d:ff:9d:4a:d7:d0:37:da:6d:35:
9a:51:91:b4:4f:8d:02:3e:07:39:92:eb:19:34:99:
c7:38:8e:3f:e4:52:5b:0d:80:0f:cc:03:88:23:1f:
2d:25:69:5f:18:5a:4a:e1:3a:3c:17:01:c1:61:09:
d1:d2:72:4d:f3:1e:31:39:fb:7a:22:14:29:39:7d:
0e:21:21:c3:44:0d:b9:9d:f9:b0:23:98:52:17:99:
66:d5:30:a7:94:70:51:7a:78:b4:cd:60:b5:67:5c:
3e:db:21:f6:e1:e0:39:38:ba:a8:a8:18:e8:94:b8:
c5:90:7c:a9:ab:fa:ca:aa:8a:a5:50:dd:72:e5:f4:
4f:e7:16:a3:5d:71:91:d2:6b:47:2f:29:d1:3b:8d:
44:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142422
sbgp-ipAddrBlock: critical
IPv4:
203.16.0.0/21
Signature Algorithm: sha256WithRSAEncryption
13:a4:dd:62:ab:11:39:de:f3:4b:70:f3:56:d0:81:20:fa:ea:
87:e5:67:bb:d6:36:19:5b:79:4c:20:75:13:31:bc:3d:1f:ac:
b7:be:49:04:02:a2:f1:bf:0a:56:17:85:7c:d6:e5:c7:85:ff:
f7:a0:bf:c3:49:0f:48:b1:bd:ae:97:ad:1e:ab:49:56:9a:10:
ff:7b:28:db:6b:1d:78:5a:f0:1c:ea:47:0e:52:41:23:61:2f:
c1:3f:a5:27:b2:a6:59:32:0c:5f:f4:08:73:10:09:7f:ab:d3:
75:19:a0:a1:42:1b:fe:b1:26:10:5d:b4:a0:c9:0c:46:4d:97:
6b:2d:0a:b7:f1:d3:67:f1:35:5a:96:89:b3:a8:7e:e3:6f:cd:
aa:b3:94:6d:9d:7d:d0:59:8a:f0:06:b0:10:67:14:71:c1:f9:
ca:e7:8d:f3:ef:97:fc:58:e8:cc:d7:51:97:82:a8:ed:8c:80:
fd:ff:9d:a9:da:fa:0b:5f:c7:af:c1:09:a9:a7:c4:14:09:22:
ad:28:b3:12:54:80:a8:80:ef:5a:bc:94:8c:b1:72:06:b8:ea:
8c:4b:1e:c5:d2:20:04:d7:79:10:1c:0d:67:b4:16:8b:d0:9c:
93:da:17:f0:6f:91:47:61:42:5f:0f:5d:6d:81:32:de:ce:9b:
3d:2c:71:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 20:42:27 2025 by rpki-client