Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
File: MpUupGGVY1bTd-vdS_oYcqjh5EM.cer (raw, json)
Hash identifier: xvd9KqAGlyCm8zWM9df2poZ6dgYLNCN7JfsTv6fHEA0=
Subject key identifier: 32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025351
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 03 Jul 2025 16:09:46 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 38606
AS: 132826
AS: 133020 -- 133021
AS: 134974
AS: 136728 -- 136729
IP: 103.19.32.0/22
IP: 110.92.24.0/21
IP: 202.61.64.0/22
IP: 203.55.67.0/24
IP: 203.171.6.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152401 (0x25351)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 3 16:09:46 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A914CD2D, serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:e6:ee:2e:17:61:0c:be:c3:58:a6:28:2b:
0e:70:f1:3c:06:ff:15:cd:36:2a:e0:f6:39:61:4e:
a6:32:6e:7f:26:a6:66:a2:f4:a2:ee:07:6a:17:d3:
7b:a4:51:64:67:7b:b2:38:05:ce:25:c3:20:16:2d:
14:8b:f2:9e:6f:d3:1a:86:c3:9d:c5:d8:84:8f:52:
7b:e2:6b:a8:7d:1b:f7:a1:a9:95:24:36:76:0e:ee:
86:f7:c6:fa:97:57:62:a1:a1:e0:59:ab:4f:64:21:
b4:9b:5b:ac:4b:ed:e0:cd:04:25:e4:c9:9b:87:c5:
c3:c8:af:bd:0f:d8:9c:d4:03:12:58:45:4b:f6:5d:
90:ed:17:33:21:4f:94:2f:1b:b6:c1:d0:a9:37:c4:
ae:bd:a2:f6:b7:f0:ec:93:7d:d6:63:8a:ed:69:30:
10:23:b7:12:9b:f3:c2:7b:de:f2:83:81:12:16:fb:
a8:51:4b:0e:6a:95:38:d5:09:1f:d1:eb:19:86:63:
be:da:1e:62:29:18:d0:a9:5c:32:4d:b4:49:ea:98:
ef:4e:9e:42:78:2a:1d:67:d1:5d:65:9d:0a:e1:f1:
23:2e:6c:e2:bb:19:da:4e:cf:51:39:c8:3c:3f:de:
f2:80:ef:b4:2c:f7:5c:29:ba:e5:23:f9:66:6e:61:
c2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38606
132826
133020-133021
134974
136728-136729
sbgp-ipAddrBlock: critical
IPv4:
103.19.32.0/22
110.92.24.0/21
202.61.64.0/22
203.55.67.0/24
203.171.6.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:21:f5:62:f7:15:95:1a:0e:a8:46:11:c7:1c:05:d3:02:6b:
23:33:ce:45:79:c8:bf:b0:b6:db:10:73:93:47:a3:f4:d2:4e:
e8:eb:57:60:6e:38:1e:11:f6:c4:2c:5a:c8:24:5e:bc:cb:12:
da:12:83:5b:71:7d:6b:05:d0:2f:b7:79:ed:b7:85:59:d9:c4:
41:74:4f:b3:1c:0d:f2:9c:b2:38:95:cb:81:93:5c:98:4e:4b:
84:ee:57:de:f0:60:e3:15:87:9d:03:5d:91:99:aa:a1:61:b9:
6e:d7:59:86:7c:05:9f:0d:fc:db:47:bd:c9:71:c1:82:60:02:
6f:4b:ba:20:b6:3c:1e:ee:90:f0:75:9b:1e:4a:31:51:33:6c:
a0:6b:c5:56:f9:cc:ce:d3:ed:bf:0b:16:61:11:8d:5c:c1:f0:
5e:eb:f8:e4:97:cc:98:ad:b2:ae:c7:0d:30:6c:70:ed:6b:95:
97:70:a0:18:e5:a8:e1:0b:a9:e1:bb:da:15:6d:66:e4:e6:91:
8e:7f:2c:6c:7f:f1:74:7e:5f:42:e7:7e:d6:4f:9e:97:fb:e3:
20:9a:6b:95:44:86:aa:54:1d:50:d3:f7:3a:0f:0d:6b:81:6f:
f2:29:a7:a7:85:4d:27:66:5e:65:c1:74:88:98:a0:46:ca:2f:
8b:9b:06:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:57:43 2025 by rpki-client