
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer
File: V_uJOVOJZAtoaaXiQHS0LkIeK9c.cer (raw, json)
Hash identifier: aHkK1DPueDrSRF31GGaXZW8+YLkmtTFjFIcrXYajRfI=
Subject key identifier: 57:FB:89:39:53:89:64:0B:68:69:A5:E2:40:74:B4:2E:42:1E:2B:D7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02429F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 30 Apr 2025 13:43:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 136474
IP: 42.156.32.0/22
IP: 103.89.180.0/22
IP: 2400:f240::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 May 2025 18:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148127 (0x2429f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 30 13:43:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A9132DF5, serialNumber=57FB89395389640B6869A5E24074B42E421E2BD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:58:d4:4f:b4:1e:74:4d:0d:8b:22:6a:9d:9e:
a8:b5:b3:89:98:3a:40:68:5b:3e:a2:94:b4:97:87:
b8:ea:27:bb:e3:d9:25:9a:31:1f:c8:00:bf:46:0a:
4e:f0:09:04:a0:3a:f4:3b:3a:bb:90:c1:ec:da:d5:
d2:7e:78:9b:86:ad:6b:21:81:4b:a2:bb:ff:32:e0:
40:92:28:53:da:20:e9:93:af:75:85:ae:bb:18:2f:
e8:6a:d4:2b:cb:22:73:f5:7a:2f:63:35:ae:6a:7c:
d1:12:5d:80:f0:61:ca:b6:2b:71:11:9f:47:be:bd:
44:93:22:de:73:50:0a:31:82:08:ff:5c:44:15:19:
89:32:e2:97:83:c7:1d:0b:09:a9:bd:7e:16:e6:f7:
c3:4e:98:cf:e5:4f:3a:71:3b:c3:73:8a:8b:54:87:
f1:73:8b:5f:09:03:5f:3a:07:40:71:31:c9:ac:2b:
f5:2d:ee:2c:6a:20:04:e2:95:2b:82:9b:b0:74:ca:
23:15:7d:4f:3a:29:e3:63:67:1b:12:d0:c2:d3:c9:
4e:73:d6:a8:95:13:3c:f1:bb:a5:9b:1f:28:c9:94:
ae:00:7b:8c:fc:7c:96:4f:69:75:82:97:7b:f6:12:
9e:1b:ce:80:3e:fe:78:53:6a:92:fc:3b:b3:c5:79:
65:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FB:89:39:53:89:64:0B:68:69:A5:E2:40:74:B4:2E:42:1E:2B:D7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9132DF5/82072E7A7C4311E98286512CC4F9AE02/V_uJOVOJZAtoaaXiQHS0LkIeK9c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136474
sbgp-ipAddrBlock: critical
IPv4:
42.156.32.0/22
103.89.180.0/22
IPv6:
2400:f240::/32
Signature Algorithm: sha256WithRSAEncryption
36:69:71:82:e3:b8:76:f8:13:72:0e:1e:37:36:ad:91:64:54:
8f:4f:fe:c3:7a:9f:55:5c:24:6e:b0:58:ae:18:5f:57:74:0f:
db:b7:6d:93:74:23:5a:f6:2e:91:d2:46:56:36:24:a0:6b:14:
a5:19:2f:e2:c6:4f:f8:a7:24:74:43:da:60:b8:f9:cc:df:e4:
3b:c7:06:63:93:78:da:88:96:19:51:20:82:37:dd:73:08:e2:
18:6c:0e:73:27:05:0f:b6:50:ab:b3:30:2d:60:e0:1c:1e:f7:
52:ad:fe:ee:ba:75:ed:63:4f:96:e2:cd:68:7e:69:01:39:41:
3e:5c:8c:76:21:0e:2b:3a:9d:f5:cb:82:89:0c:68:34:52:a0:
2d:dd:af:ef:6d:7a:5b:ed:29:ba:9c:16:7c:2a:90:22:4d:31:
46:8f:a7:42:6c:43:4e:49:8f:42:f7:fe:9c:f8:b3:d7:97:21:
0f:3c:d8:02:d5:34:2f:25:08:3e:ae:7c:78:7b:aa:61:21:6b:
53:9a:a3:f3:9a:98:b2:ba:c6:d9:ca:5f:4b:18:96:5a:3f:b9:
ae:c9:0d:19:c4:14:04:cb:02:60:93:ba:a1:18:41:6e:40:42:
03:af:f4:1c:32:ec:6d:05:28:5d:31:6b:3b:bd:3e:62:08:89:
90:40:5b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 20:36:00 2025 by rpki-client