Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer
File: LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer (raw, json)
Hash identifier: DhvzcD7T0Kyv6WmH2hMbC+IdrUfIe2xvyX2WOdb6HKU=
Subject key identifier: 2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02410F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 26 Apr 2025 14:16:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 141778
IP: 103.163.238.0/23
IP: 2001:df6:2d80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 May 2025 06:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147727 (0x2410f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 26 14:16:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91552E3, serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:26:49:0b:e9:82:51:ba:f6:20:fe:70:6c:
69:91:7c:b1:89:8a:fa:d9:12:3c:ff:be:f4:68:67:
88:d1:d4:cc:94:8a:ef:25:b4:e1:6e:80:46:0c:4b:
f5:51:ee:c9:5d:00:cc:33:5e:d9:9f:c4:70:17:a3:
ca:b3:25:4e:0c:79:f3:4f:55:3d:cc:6b:ba:b4:23:
f0:80:da:bf:42:ad:dd:9d:c3:40:ae:dc:90:72:3c:
ed:99:22:53:66:f9:ea:fd:07:b2:28:2f:bf:f6:f5:
03:b8:eb:fa:da:b6:68:a1:ea:d1:7d:26:12:22:86:
91:b4:19:c6:f0:2d:f7:dc:66:fa:7c:97:a3:d5:c9:
9c:00:15:f8:b0:c8:96:49:d7:e7:45:32:5e:21:cd:
02:ae:6a:4c:d9:d1:7e:92:9e:57:64:bc:f5:11:25:
dd:8c:2d:0d:38:5a:62:19:1c:42:83:95:03:a9:c3:
1c:2b:eb:e7:36:a6:1a:bb:af:a8:87:9d:20:f8:68:
10:44:df:ee:aa:75:df:03:aa:de:63:a8:d3:80:8b:
68:cc:74:d5:39:3c:ac:c4:50:bc:b7:d0:c6:39:39:
e9:8e:de:a9:43:a6:12:94:04:0c:30:10:24:c0:09:
74:09:86:19:ee:45:c0:ce:7c:de:63:7f:ac:10:ce:
3c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141778
sbgp-ipAddrBlock: critical
IPv4:
103.163.238.0/23
IPv6:
2001:df6:2d80::/48
Signature Algorithm: sha256WithRSAEncryption
2d:46:ab:0b:53:a5:80:a9:9b:dd:e7:b8:61:f8:48:17:33:bd:
28:8b:63:86:d4:e0:9d:a8:40:36:4c:3a:06:bb:32:1f:b8:4d:
5a:9d:0b:0d:31:aa:0d:9d:fb:a6:75:66:de:25:02:02:e3:85:
c4:1a:70:37:25:6a:db:57:54:d4:5e:31:72:12:68:8e:71:fd:
93:c5:a8:03:e9:6b:1d:d2:ad:7c:fe:72:b2:7b:46:7a:79:50:
63:a6:ff:e7:14:42:83:30:ae:ab:24:25:b9:4d:ca:32:45:4f:
3d:49:62:aa:e4:79:8c:10:0a:e9:31:89:48:78:01:77:c9:4c:
b4:7b:78:dd:e1:57:20:b7:66:ba:dc:c2:90:51:68:1d:f9:59:
cf:0a:f4:fb:4b:25:60:ed:eb:a8:81:d8:a8:b3:b5:59:9e:78:
7f:2e:e7:ce:bc:cb:08:e9:fd:20:ae:12:6a:4a:29:99:22:fa:
36:af:e5:a1:40:b2:e1:03:ae:eb:d3:11:0e:5e:52:2c:e6:8d:
d8:e8:d8:a6:c5:26:85:da:bf:06:d9:ab:a0:40:1f:48:8e:f8:
b2:f1:76:80:08:94:8e:be:75:fa:26:21:0a:76:22:80:50:a5:
1e:fd:39:84:e7:89:df:60:81:8b:28:5e:0c:e2:7d:75:e9:97:
03:a4:ef:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 12 10:23:23 2025 by rpki-client