
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
File: Mu8k27J0cpaQRU_8KxGThFGcavo.cer (raw, json)
Hash identifier: SnN/RjIYjStoC71qr1KewCgE9ZdLTMl9BscldDTVYOQ=
Subject key identifier: 32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0242E7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 May 2025 06:16:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 134101
IP: 103.52.193.0/24
IP: 2001:df3:1400::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 May 2025 18:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148199 (0x242e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 1 06:16:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A9181477, serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:13:a0:6e:7b:d7:b6:b3:f2:f3:88:4a:39:62:
5b:ac:1f:77:ef:33:c6:ea:af:df:9e:a9:ca:9f:ad:
ba:7e:ed:7b:a1:cc:05:a6:f3:30:2a:86:95:be:24:
a6:d3:f9:1c:ab:5b:9a:f4:66:ed:94:bc:df:66:82:
68:b4:48:34:2d:76:a0:24:80:6b:ae:ba:a2:4b:f0:
d0:aa:11:75:61:97:17:66:28:3f:91:e0:1f:2b:7b:
8c:b4:29:88:e2:8c:44:9f:cf:a6:ae:91:14:cf:f5:
8d:d1:60:a4:f7:54:b3:72:5a:39:39:66:d1:da:91:
8d:70:e3:7c:9d:d6:12:25:62:01:e2:30:a8:c7:e0:
24:f8:ec:45:ec:68:57:35:47:7d:21:68:53:a0:49:
5f:9a:3a:c5:fa:44:14:09:f9:00:4b:60:51:d7:6c:
44:f9:70:37:85:89:c1:81:f7:91:12:a5:54:d4:e4:
c0:0c:48:ae:e5:b9:bc:32:67:eb:49:aa:5c:96:e1:
94:c0:c1:77:27:46:dc:d5:3a:5b:86:cb:a7:bc:9f:
33:1d:53:49:1e:62:d7:83:7f:6a:47:32:1b:e3:7a:
99:6d:23:97:54:e4:2c:75:ed:a1:77:e8:c9:33:aa:
58:ab:1f:ef:be:4a:97:71:d8:c0:75:08:17:4a:2c:
5c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134101
sbgp-ipAddrBlock: critical
IPv4:
103.52.193.0/24
IPv6:
2001:df3:1400::/48
Signature Algorithm: sha256WithRSAEncryption
34:33:45:8e:a0:f8:3f:4e:5b:c5:03:2e:8a:f3:bc:4b:20:eb:
ca:09:f5:19:92:43:8c:77:7b:5c:a7:b9:9e:ed:5f:e6:e9:c8:
ac:6c:b2:a4:f9:6e:89:d1:3d:84:bd:61:62:c4:99:82:55:f7:
62:ed:ef:de:cb:17:0b:eb:b7:5d:4f:ea:63:73:bf:23:ab:f0:
c2:3d:fe:ce:8b:bd:f7:70:45:1d:bf:41:f7:41:93:36:fe:ef:
c2:f4:05:7a:34:fd:14:6b:45:c9:f0:98:7d:a1:11:8d:df:6e:
60:f9:2f:07:23:27:ea:66:8e:88:cd:61:3f:e1:da:bc:27:63:
bc:56:47:11:12:e2:ad:ed:c3:a1:f6:fe:88:2e:81:de:7e:88:
1e:c5:4d:f0:db:9e:6d:ee:49:cd:4b:60:ec:a2:74:b7:36:1e:
11:eb:38:a1:fb:60:c1:92:7f:d2:ec:5b:c0:5b:e7:08:61:3f:
c2:75:89:30:df:b2:2a:62:2d:e7:6d:8c:a8:19:19:7c:28:16:
11:53:d0:df:56:4c:ca:e3:69:09:8f:b4:fc:6a:37:40:b7:6e:
7f:6d:13:df:73:db:4b:81:e4:af:0b:5f:0d:92:5e:25:53:e2:
11:57:ba:85:70:26:c2:fc:79:85:0b:87:7a:bc:3b:55:a3:23:
64:b7:0d:03
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 4 22:43:42 2025 by rpki-client