Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer
File: KOAXfHClckcH27FJ7VV8D4FW4Ok.cer (raw, json)
Hash identifier: HTY//y9LbnV8+xUBPQRKXCkiH7Z30kVFz3LekolhlgY=
Subject key identifier: 28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02507E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 26 Jun 2025 13:59:17 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 103.167.234.0/23
IP: 2407:79c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Jul 2025 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151678 (0x2507e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 26 13:59:17 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A9136109, serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:07:c5:6a:74:b7:35:84:2d:cc:af:be:1d:
b4:d7:a1:45:8d:19:89:f5:47:ce:9d:2d:ef:bc:09:
bc:1d:21:3a:64:7f:94:4f:33:cc:b7:08:a1:d2:a4:
e1:2d:25:fc:d8:07:a9:7c:71:d1:87:c3:84:de:e4:
82:69:93:e9:cd:f7:1d:e1:43:97:87:84:f6:2f:15:
20:6e:4e:47:7c:cf:51:53:71:58:21:68:87:18:1e:
5b:e7:5f:82:65:72:8b:bd:35:d2:ea:d8:ab:03:b3:
0e:1e:e3:cc:86:62:66:5a:3c:1d:68:ae:15:41:26:
e1:82:db:2f:84:f9:68:fa:e2:01:3e:f0:61:e5:3a:
a1:23:34:e2:ab:9e:cc:41:f9:1e:91:74:41:79:c8:
d6:2a:ee:ec:ae:bc:ca:00:f4:07:a7:b7:46:15:bd:
fd:be:80:30:44:c4:86:b2:ae:dc:74:aa:27:99:4a:
20:4a:5e:36:32:88:b4:2d:9d:8a:f6:bd:d6:a8:0b:
64:99:90:49:3a:1a:b2:4e:cd:db:c7:64:51:92:0e:
04:93:2f:92:ac:28:2f:fe:a3:9c:17:dc:94:28:6d:
62:95:df:a6:e7:e5:04:c8:65:ca:03:7b:1e:b7:c4:
26:01:24:eb:ca:6c:b2:a7:79:63:e4:3e:a1:f7:c1:
36:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.234.0/23
IPv6:
2407:79c0::/32
Signature Algorithm: sha256WithRSAEncryption
cf:65:b7:23:2a:33:f8:b8:f3:0a:d0:a0:2c:de:90:50:18:51:
14:b9:fc:95:97:c7:c1:10:86:04:47:b6:88:91:b0:66:d4:04:
df:bc:6b:ac:c8:6c:d6:65:de:a4:20:c5:a5:2c:6f:9c:d6:4a:
9c:d6:2f:eb:1f:72:e7:e8:3e:35:32:77:e7:6f:7c:ca:26:e2:
be:f0:d1:84:6d:93:40:38:b7:8d:8d:08:ea:53:7b:cb:3f:8d:
33:6f:2d:96:b8:83:b6:9b:65:99:65:f1:df:c2:1e:20:8f:7b:
79:bd:a8:d0:95:26:ad:32:0e:8d:2f:36:9f:5e:4a:ca:35:9c:
31:d1:45:05:87:e6:76:8c:a8:b4:56:41:c6:cc:b8:6f:4b:db:
ec:7f:0a:82:e9:97:7f:a9:1c:4f:d9:3d:bc:41:f8:3b:0a:a9:
a5:fa:81:36:e6:fb:3e:31:43:91:02:47:af:db:f1:7a:ab:90:
93:28:cf:ce:bc:ee:ed:64:f2:ed:91:10:16:86:4d:bf:6f:5d:
38:d3:83:ab:0e:85:e6:4f:30:e1:82:7a:95:14:f4:81:29:45:
e1:62:c5:f8:77:65:f6:67:33:a2:d3:6e:5d:cc:4a:31:e0:64:
a4:0f:05:2a:82:c1:90:aa:4f:ff:1a:7e:5d:d6:b9:95:27:b7:
65:29:b8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:33:13 2025 by rpki-client