Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
File: JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer (raw, json)
Hash identifier: MvXhsjgurgHi+1du5jM0IZE3ch35D68eIbafHx3fSiM=
Subject key identifier: 24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024E99
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 17 Jun 2025 00:55:12 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 133113
IP: 2001:df5:aa40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Jul 2025 19:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151193 (0x24e99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 17 00:55:12 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A91B8A86, serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:de:53:14:81:2b:e0:da:35:a1:54:be:6c:53:
a6:90:50:f6:33:99:3c:bc:5d:9f:c3:50:f6:ec:51:
27:be:dd:f2:51:7f:23:a5:ee:3a:c9:ee:d9:bf:6c:
0b:e0:86:40:3b:bb:af:04:06:87:98:4a:de:56:ce:
2b:82:04:4c:45:af:23:f0:97:99:c5:e3:ce:e4:2d:
41:b5:d9:0a:83:b9:d7:e5:0e:87:21:1e:af:78:2a:
3c:28:c9:ec:9e:77:90:de:8b:44:14:96:d7:3d:d8:
c6:fa:f0:0c:cf:d3:de:e0:d4:c7:70:00:92:6e:a1:
e4:65:eb:67:2d:4f:69:c1:36:b0:30:aa:e1:2e:ee:
a4:81:12:2c:69:b1:3c:9c:97:42:e0:b0:75:6a:75:
09:b0:f2:31:6e:67:14:25:cb:ac:f2:84:cd:ef:ee:
c4:ed:2e:9a:cd:39:df:cf:51:53:e0:4f:48:ca:4e:
cb:d0:90:c3:ad:b5:16:e4:19:70:77:16:dd:a7:a7:
73:71:5b:e4:cc:2c:37:5a:35:a5:4c:1f:fc:9b:7b:
f3:41:76:8d:c8:6d:cb:35:77:dc:4d:02:58:dd:44:
14:30:0f:9c:45:47:a0:02:ad:8f:56:f9:be:5e:b8:
30:3f:b2:91:d2:d4:2d:33:72:e5:37:5e:a7:14:f8:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133113
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:aa40::/48
Signature Algorithm: sha256WithRSAEncryption
27:b2:ec:51:dc:0c:07:8a:23:12:1b:e4:fd:9e:69:c3:58:80:
b6:de:66:fd:31:e0:e7:12:a3:a9:cf:dd:68:0b:d6:25:af:ab:
aa:9a:8c:c9:bb:b9:28:62:72:19:90:a5:c0:ed:da:84:c1:0d:
56:e1:d3:4e:77:61:10:2b:29:45:72:70:0a:78:7a:93:09:cc:
bf:6f:f8:5e:b9:9c:c1:eb:be:9c:1f:00:cf:b1:08:e6:0f:98:
bd:9d:d4:76:0a:d0:ce:db:aa:21:0b:06:bb:60:63:cd:7b:5c:
c6:03:b6:3d:72:e5:d2:a3:93:28:f9:a4:44:ea:e3:cf:cd:43:
c2:19:47:dc:75:d7:0a:d9:a3:e7:3f:6a:48:9c:68:14:4a:f7:
67:50:76:27:47:65:55:00:32:a9:6c:2a:ba:19:78:c1:95:41:
9b:44:77:7f:fa:ef:5e:92:5c:78:c8:b0:19:97:66:e0:92:6c:
d2:8a:16:ad:df:ff:5c:c5:98:75:bf:ec:9f:77:02:da:de:74:
25:64:b5:ca:2d:1a:8a:28:0f:86:9e:04:00:e1:55:23:02:dc:
e0:da:d8:77:62:e1:cc:e0:80:16:86:9c:7b:82:b1:ac:1d:0c:
90:c5:93:4a:c8:e4:99:39:d8:67:47:b9:0a:3d:30:9c:c2:70:
d5:9f:a8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:46:46 2025 by rpki-client