Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
File: fwOXxqlOUll2g0u_1YAvFbeV-44.cer (raw, json)
Hash identifier: +bFxRutgX26/U+u13R4c4NvVCwX4TPO0xloOTJuoY3o=
Subject key identifier: 7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024365
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 02 May 2025 11:08:00 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 153836
IP: 163.227.184.0/23
IP: 2001:df5:77c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 May 2025 18:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148325 (0x24365)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 2 11:08:00 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A9189D9B, serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:73:be:e5:d7:54:64:3a:01:14:44:6a:0c:f9:
49:62:ae:9d:ea:17:36:55:7d:9a:5c:cf:74:e6:3e:
70:2c:e8:d0:c1:61:fc:90:13:7f:ec:d4:94:88:08:
27:dd:51:ad:ae:d0:80:2f:3c:90:5b:01:0c:c9:35:
27:3e:ad:73:84:c4:bc:b2:65:26:17:70:27:95:61:
f3:23:88:0f:49:57:61:0f:66:1a:a4:b5:5f:c8:33:
08:ba:e3:a6:8f:54:a4:9a:fe:0c:b5:05:f9:85:5a:
23:84:c3:df:57:21:a4:d8:54:e7:78:4e:1f:5a:62:
85:60:13:a2:6b:07:9a:98:00:05:60:6e:25:b7:31:
ce:62:fc:f3:38:cf:6e:7b:06:8c:95:12:68:f1:19:
79:7a:11:b5:8d:79:e7:30:94:53:31:00:32:ee:09:
9a:85:ef:d3:32:e7:71:53:64:3a:06:7b:9f:19:f3:
e8:fd:df:13:bb:d7:f1:92:33:a4:8c:ac:a4:20:c1:
f0:28:b1:72:b3:dc:8d:a9:09:e6:8b:01:57:4c:39:
a3:d4:e9:57:3f:e5:28:0d:67:40:a7:0e:f7:64:80:
b3:36:24:29:1c:11:9a:73:29:17:75:1b:2d:ee:55:
78:a9:54:10:ae:75:bb:d5:9e:f9:b5:e3:23:75:6f:
d5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153836
sbgp-ipAddrBlock: critical
IPv4:
163.227.184.0/23
IPv6:
2001:df5:77c0::/48
Signature Algorithm: sha256WithRSAEncryption
37:f4:16:a5:d9:04:6b:c5:21:84:51:1e:4b:33:3f:f0:48:2e:
67:90:2a:9e:fd:07:34:db:76:e9:49:13:da:04:d8:cf:59:42:
c0:40:c2:9f:55:b1:91:e5:4e:02:bd:db:09:15:a5:2e:64:1d:
98:84:dd:06:c4:c5:f1:ef:4d:0d:f7:61:10:bb:1a:d4:61:69:
07:b5:d8:83:be:28:cc:f4:7d:63:22:88:7b:fa:d1:e6:49:10:
ac:be:2e:6d:cb:4c:7c:31:78:b8:20:07:5f:0a:e5:78:0d:cc:
0e:34:42:e5:19:c7:c1:1e:57:90:a0:b8:11:2b:ae:42:2b:ac:
2f:c0:69:13:7c:63:28:d1:f0:09:5a:b3:ca:51:82:3c:9c:fd:
8c:5f:61:ca:a7:3b:45:17:ee:89:a4:50:c7:f4:a7:95:15:f5:
cd:ed:ae:ba:c0:36:af:dc:6a:c0:b7:5b:bc:a2:8b:07:06:f9:
5b:fd:7d:47:28:6e:9e:e7:9b:4e:00:7d:7f:05:f4:27:38:15:
fd:ae:09:6b:4d:e6:c5:bf:ef:9e:8e:b7:7e:da:e5:b0:3f:d3:
c9:a0:fd:b4:32:e8:86:d4:33:ed:35:90:13:c7:19:03:ba:d6:
6b:9f:e4:2f:9e:46:d4:75:fc:6e:fc:3b:5a:b4:30:a9:32:6d:
74:35:e8:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 4 23:12:41 2025 by rpki-client