Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer
File: gFLXiRiFOIg0vD1ozrIclvdiXmc.cer (raw, json)
Hash identifier: wGHoAJmOZASiCMukJNkerB/LBXgZcoy5l/fvMW+jv28=
Subject key identifier: 80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024E88
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 16 Jun 2025 16:07:46 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: IP: 103.248.97.0/24
IP: 2001:df0:a000::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Jul 2025 06:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151176 (0x24e88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 16 16:07:46 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91CBE89, serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6f:98:fd:a0:ee:7b:53:08:07:20:63:cc:d2:
27:5d:36:33:e3:d5:b5:11:86:86:f5:7c:a0:72:e2:
d8:cd:33:0d:ed:ed:0f:0d:e4:28:ee:dd:89:de:15:
9e:2a:a6:ea:6c:00:9d:17:40:f3:db:90:b9:5d:fd:
f4:26:b8:e1:4e:b5:22:42:98:ce:f6:67:35:ee:05:
c3:df:a0:8e:06:d9:9a:d1:64:78:99:ab:e6:0b:dc:
d7:24:24:6d:b7:e4:64:cc:84:1a:96:e2:b1:5f:fc:
2f:3d:21:91:d9:7c:23:72:92:95:b2:09:c9:9d:9e:
b9:2a:da:07:57:9b:4e:a6:57:d7:11:cd:6e:78:0d:
da:af:ff:f1:9d:ff:de:d5:d6:de:aa:54:ae:17:cf:
ef:d9:75:c2:ef:30:38:9e:c1:3e:c5:28:75:a7:cb:
53:e6:2e:be:83:04:5a:50:61:51:90:32:9f:5c:31:
31:c7:5b:45:e5:d4:d1:e3:d6:69:5f:da:f1:9d:5f:
22:07:31:55:f2:3b:16:c9:f9:91:85:6a:c4:07:e5:
d8:fe:25:10:d8:29:2b:b8:0e:16:6f:47:0e:44:69:
43:f0:fc:b5:91:de:be:91:c0:c2:36:9b:4a:b6:bb:
87:bd:8e:49:74:48:db:c3:46:c1:33:c2:e6:c6:dd:
72:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.248.97.0/24
IPv6:
2001:df0:a000::/48
Signature Algorithm: sha256WithRSAEncryption
75:35:11:eb:5c:d6:3d:7a:7e:66:13:4d:a0:fc:3a:81:42:99:
56:45:d0:9b:3e:1b:48:06:bb:94:ba:6b:a4:75:3a:71:e1:6f:
8b:93:96:0b:4a:f4:10:37:55:17:02:df:6b:7c:6a:df:2e:9f:
3f:9b:53:f6:7e:7c:d3:be:bd:ce:41:0f:ff:9a:f1:9a:ab:03:
14:9c:86:72:4e:41:bc:fe:ce:d9:7b:74:7a:4b:50:89:a1:df:
a7:88:5f:61:6c:da:6d:19:29:f6:ce:b6:9b:92:3b:f5:2b:7f:
70:dd:f3:2b:30:25:c7:ed:1b:37:d5:5d:88:0f:5d:88:70:e4:
02:7c:6a:3c:69:f6:d5:cb:e3:51:c3:a1:02:ff:3f:ea:05:60:
08:a8:20:b8:e4:06:58:1c:48:14:31:a5:cf:bd:1f:35:13:25:
47:f5:e4:fc:5c:5d:d9:23:ef:65:96:23:2a:98:71:64:87:34:
b6:cf:e3:64:fb:78:3f:c0:cb:fe:d5:26:28:9e:3c:7d:2f:44:
4e:31:c5:aa:0d:84:bb:9a:cc:29:91:1f:11:24:41:ff:88:2a:
30:60:f8:fe:2b:c2:60:84:65:bc:49:1e:be:c7:85:8e:0b:ea:
af:c3:74:eb:3d:37:85:22:87:33:c1:ed:07:0d:04:37:cf:97:
cf:6d:a0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:35:51 2025 by rpki-client