Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
File: LMM_vLhkCEAgiUpy3QiFBa-btm0.cer (raw, json)
Hash identifier: YNrp7HdFN/bsB9bCSWdlXbNFgMcSp2BeYahCU+qKXB8=
Subject key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0243C9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 03 May 2025 19:23:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.114.116.0/22
IP: 103.53.196.0/22
IP: 2402:2f80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 May 2025 18:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148425 (0x243c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 3 19:23:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:11:ae:2a:3a:d9:b4:ae:84:1f:a0:94:fd:f1:
ec:21:f6:4c:18:bf:4d:65:98:5d:08:8e:06:3c:22:
ec:31:50:39:f8:15:29:6c:46:4e:6b:38:18:e0:c7:
0e:2f:50:22:70:c0:3d:fb:73:60:f4:85:17:aa:79:
2f:0f:23:39:2f:c2:a4:c1:17:37:7c:0d:96:dc:5d:
65:9b:7a:c1:03:aa:c8:f2:2e:64:61:d5:9f:9c:26:
bf:4a:18:79:a4:29:50:cb:dc:59:85:f7:e6:10:54:
72:d8:26:d5:90:d7:eb:7d:04:9c:22:91:19:c0:20:
6c:1b:59:f7:89:1c:3d:28:8d:4e:86:0c:e5:e3:8c:
24:07:a6:fd:bd:44:8e:46:fb:cc:bf:56:26:9c:61:
e1:86:11:42:8a:ae:23:dc:b4:4a:34:39:ab:34:60:
15:13:f9:bf:f2:86:b9:48:6d:c7:ea:a7:4a:24:ff:
b4:69:16:36:68:9a:7f:5d:f5:45:22:7e:7a:df:49:
ad:3e:12:6c:7e:58:d9:8b:00:a8:dc:70:5f:25:7e:
b7:15:d7:9f:6e:5b:04:35:92:86:79:d7:ec:ae:48:
37:9f:77:bf:b8:f7:50:b0:7e:a7:4f:e3:31:29:be:
f2:4e:06:87:0b:80:ce:c7:a4:4e:3d:20:01:d6:09:
9d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.114.116.0/22
103.53.196.0/22
IPv6:
2402:2f80::/32
Signature Algorithm: sha256WithRSAEncryption
6e:d7:4c:76:30:78:24:0f:24:28:db:8a:19:2f:96:4c:70:e8:
d7:6e:17:0a:8b:aa:93:d0:ed:c2:44:d6:53:f2:9e:50:9e:3f:
cb:40:7e:fa:7b:a2:81:76:78:e4:ba:c8:34:20:17:a7:68:13:
61:da:6d:3a:c0:10:d0:75:63:d5:36:8e:ed:0e:0e:1c:3a:72:
04:3b:2a:8c:8f:22:7a:5c:97:10:7d:67:62:7a:65:de:70:4d:
41:71:e2:3a:ae:55:5d:8d:d9:57:47:a1:94:af:a1:fd:2d:53:
08:bf:42:2c:ef:48:26:47:02:12:41:5a:d0:88:32:27:49:dd:
30:f1:f2:62:8b:2d:f4:0e:08:d8:be:34:a5:96:8a:a5:d2:8f:
d5:66:0b:5c:63:dd:9b:7a:3e:73:90:66:a6:7c:aa:a2:87:64:
67:39:db:37:23:14:a2:c9:56:74:ba:f6:28:a0:f3:d5:10:db:
a8:d2:ea:60:4b:41:87:61:e2:c2:49:5f:12:39:6a:4b:dd:3f:
69:32:21:d1:55:1b:12:a3:a2:41:31:90:2c:c5:ee:b5:59:e0:
7d:82:47:fc:bf:fe:ce:ac:f3:4f:e2:f4:91:75:dc:34:96:31:
7f:6d:fe:c8:8b:31:87:b5:25:41:78:33:b0:f6:e3:41:ab:74:
21:b2:e4:b3
-----BEGIN CERTIFICATE-----
MIIGEzCCBPugAwIBAgIDAkPJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDUwMzE5MjMxM1oXDTI2MDcwMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQkFBNDQxMTAvBgNVBAUTKDJDQzMzRkJDQjg2NDA4NDAyMDg5NEE3
MkREMDg4NTA1QUY5QkI2NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDiEa4qOtm0roQfoJT98ewh9kwYv01lmF0IjgY8IuwxUDn4FSlsRk5rOBjgxw4v
UCJwwD37c2D0hReqeS8PIzkvwqTBFzd8DZbcXWWbesEDqsjyLmRh1Z+cJr9KGHmk
KVDL3FmF9+YQVHLYJtWQ1+t9BJwikRnAIGwbWfeJHD0ojU6GDOXjjCQHpv29RI5G
+8y/ViacYeGGEUKKriPctEo0Oas0YBUT+b/yhrlIbcfqp0ok/7RpFjZomn9d9UUi
fnrfSa0+Emx+WNmLAKjccF8lfrcV159uWwQ1koZ51+yuSDefd7+491CwfqdP4zEp
vvJOBocLgM7HpE49IAHWCZ3bAgMBAAGjggMIMIIDBDAdBgNVHQ4EFgQULMM/vLhk
CEAgiUpy3QiFBa+btm0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJBQTQ0LzlDQzAwQTlDQzdGRjExRUM5QkRCRkU0QkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCQUE0NC85Q0MwMEE5Q0M3RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxo
a0NFQWdpVXB5M1FpRkJhLWJ0bTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8EJTAj
MBIEAgABMAwDBAItcnQDBAJnNcQwDQQCAAIwBwMFACQCL4AwDQYJKoZIhvcNAQEL
BQADggEBAG7XTHYweCQPJCjbihkvlkxw6NduFwqLqpPQ7cJE1lPynlCeP8tAfvp7
ooF2eOS6yDQgF6doE2HabTrAENB1Y9U2ju0ODhw6cgQ7KoyPInpclxB9Z2J6Zd5w
TUFx4jquVV2N2VdHoZSvof0tUwi/QizvSCZHAhJBWtCIMidJ3TDx8mKLLfQOCNi+
NKWWiqXSj9VmC1xj3Zt6PnOQZqZ8qqKHZGc52zcjFKLJVnS69iig89UQ26jS6mBL
QYdh4sJJXxI5akvdP2kyIdFVGxKjokExkCzF7rVZ4H2CR/y//s6s80/i9JF13DSW
MX9t/siLMYe1JUF4M7D240GrdCGy5LM=
-----END CERTIFICATE-----
Generated at Sun May 11 02:02:42 2025 by rpki-client