Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inZEBFIzrjjTDTW4JtlbLntDfZw.cer
File: inZEBFIzrjjTDTW4JtlbLntDfZw.cer (raw, json)
Hash identifier: 7RC2zHfY3wrxrCF1i+H4vrAvaY92Ecg4MPdSVXEQCKA=
Subject key identifier: 8A:76:44:04:52:33:AE:38:D3:0D:35:B8:26:D9:5B:2E:7B:43:7D:9C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024CB4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Jun 2025 18:47:46 +0000
Certificate not after: Thu 31 Aug 2028 00:00:00 +0000
Subordinate resources: AS: 152890
IP: 2001:df3:ddc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150708 (0x24cb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 5 18:47:46 2025 GMT
Not After : Aug 31 00:00:00 2028 GMT
Subject: CN=A919BC3B, serialNumber=8A7644045233AE38D30D35B826D95B2E7B437D9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c3:72:7b:db:24:bf:32:e1:eb:2d:25:ef:2e:
5c:1e:0b:cc:2e:b4:44:4e:94:94:69:9f:54:9c:97:
19:a1:38:da:a7:c9:ce:eb:60:ec:3e:9b:a5:0f:55:
99:98:93:cc:52:3b:3e:cd:b4:a5:dc:c4:db:f9:65:
b0:8b:5e:c8:75:35:4d:a8:14:ba:83:30:48:32:f1:
66:85:2f:92:0f:92:50:88:55:32:a6:34:4d:c3:ef:
50:2d:8f:dd:a7:4a:9d:33:06:2a:36:03:fc:3c:8b:
af:48:16:94:3f:e3:dc:67:ad:52:fc:67:c9:ab:0c:
21:a8:71:5f:9b:92:37:16:bf:58:f1:76:21:25:5e:
28:26:8c:4e:5a:72:ea:2a:77:84:7b:2e:f2:15:2e:
d2:35:3b:12:8d:1f:6b:df:70:bc:28:4f:5f:75:5e:
4e:1e:8c:8d:99:92:0a:e4:8f:a7:b3:c0:19:7c:76:
3e:96:cb:e4:2b:3c:9a:0a:3d:c0:d3:bd:ea:85:ca:
15:9e:6e:6d:e0:7d:1d:e7:30:0a:c2:1c:b4:d3:bb:
72:76:66:84:c0:93:1e:be:18:01:b4:eb:68:ec:35:
73:ab:73:02:29:d6:3f:69:ed:82:1e:25:28:53:fc:
15:06:37:cc:e2:86:31:53:05:de:55:8a:7e:fe:22:
ad:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:76:44:04:52:33:AE:38:D3:0D:35:B8:26:D9:5B:2E:7B:43:7D:9C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152890
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:ddc0::/48
Signature Algorithm: sha256WithRSAEncryption
88:2a:cb:66:86:a0:9a:b4:6e:c6:05:20:79:94:87:28:0f:aa:
91:24:3a:b0:32:3f:b1:ac:6c:d2:7c:05:2e:2b:a8:66:d5:eb:
84:6e:3b:16:91:ba:1f:27:08:ca:1e:44:e1:a6:68:7e:91:3a:
11:09:27:94:f3:f1:4b:74:fc:bd:2f:9d:2c:8a:39:8a:80:6e:
d3:84:ab:c8:ee:13:e2:8c:12:a5:ae:04:49:76:89:18:cc:b0:
74:c7:2d:df:0b:76:11:83:89:2f:04:21:e0:f4:22:57:29:e4:
df:e0:41:91:8b:3c:92:2f:e6:57:45:b2:b0:23:ed:a9:01:09:
00:cc:ba:17:c8:15:89:57:59:a0:94:02:32:dc:3f:a5:1f:8b:
7f:47:a9:65:10:96:29:b5:2d:cb:bf:c5:41:f7:d6:59:24:c0:
b4:2f:ea:f6:93:4b:b5:70:3d:12:a1:7e:0b:1f:0c:fe:0d:c8:
36:9a:1f:09:5a:97:8b:7e:3c:21:6f:3d:22:b3:88:1f:cd:7c:
00:6d:e1:5b:db:05:1b:4f:58:2f:e3:07:0f:1c:97:55:9d:92:
5a:dc:3f:64:7d:d8:56:e7:12:f2:a9:9e:64:33:80:2a:f0:7e:
c6:39:01:27:74:3f:68:88:98:b4:2e:79:a4:aa:7a:65:93:65:
6a:aa:9e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:42:30 2025 by rpki-client