Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer
File: jUEzbLXQr_8QKCFtlTS7fgLD54U.cer (raw, json)
Hash identifier: YbDLgFea04jUBjNHzrWWh7tP+lDPUzcVb98cCFDI4sE=
Subject key identifier: 8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024E92
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 16 Jun 2025 19:35:58 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 140633
IP: 103.151.150.0/23
IP: 2001:df3:c680::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Jul 2025 06:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151186 (0x24e92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 16 19:35:58 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A91C254D, serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:93:f6:e8:32:19:2d:a8:13:ba:fb:29:da:
16:94:bd:2d:76:66:45:c5:b2:b9:b2:bc:d3:4f:af:
63:ee:a6:41:3b:53:65:16:fb:63:14:71:2b:c3:b4:
5e:e7:63:07:5d:c5:20:c4:2f:18:29:39:73:3b:8b:
90:85:6f:89:04:af:b5:96:95:a4:3d:79:cf:df:1e:
49:78:70:54:e5:28:1e:ed:11:c3:c5:9b:7e:9b:37:
d0:2b:6d:f6:2f:40:88:6b:7b:18:0c:39:ed:52:0e:
42:9e:cd:bd:42:05:83:c6:64:1d:1d:f2:a4:54:38:
9d:ba:b8:5a:90:78:e3:62:03:dc:52:f4:b9:aa:27:
bd:a8:56:68:7f:8e:d9:4e:8f:9b:bf:e9:ef:e7:0f:
46:a2:07:6f:e4:87:17:7d:a4:05:60:3a:01:01:d8:
ba:f4:69:1b:0f:fa:bd:7a:0b:26:9a:bc:92:89:f2:
05:be:80:e9:9d:48:45:4a:8d:93:c9:cf:19:0f:67:
e6:b4:18:37:0a:08:96:ee:ae:06:6e:8f:c2:11:d8:
0c:82:45:2e:87:22:bf:05:90:93:98:1d:f6:40:a6:
c0:54:88:d9:b1:16:07:64:82:8b:33:c9:58:18:00:
88:31:42:c3:ec:a2:56:61:db:51:5b:f7:81:bf:42:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140633
sbgp-ipAddrBlock: critical
IPv4:
103.151.150.0/23
IPv6:
2001:df3:c680::/48
Signature Algorithm: sha256WithRSAEncryption
16:d1:f5:0f:18:48:48:05:23:1d:e8:70:36:ae:fe:70:7d:7c:
68:7e:db:65:97:6c:70:f6:74:dc:b3:c6:85:ed:cd:cf:5f:a2:
31:9f:5a:0e:9b:3b:a8:5c:14:41:22:7f:62:06:09:ee:42:1e:
c0:46:22:c8:4b:1f:7f:cf:7c:d9:50:82:01:da:19:e8:6b:1c:
21:d8:41:7b:23:cb:1b:49:12:77:1e:10:08:bb:1a:84:6b:0e:
2c:6c:b0:f4:8e:40:e6:2b:e1:52:58:ba:bd:b2:13:e3:94:01:
1e:34:42:87:aa:29:46:85:d7:76:7b:e6:be:50:cc:d3:03:eb:
60:9d:cb:b9:44:b8:3f:e7:4d:18:e8:56:21:31:37:b4:b8:7c:
05:d9:8d:60:cb:e7:92:2e:62:64:6f:ab:47:cc:99:8c:7c:6f:
48:ee:5a:27:b7:29:55:ca:b6:8a:45:12:d2:60:45:f3:70:05:
83:c7:4d:44:10:74:d1:55:b6:e2:1e:fb:8f:a1:f5:dc:c7:36:
51:ad:93:3b:5c:8c:7f:c6:b6:2a:9d:7b:96:b2:16:29:0e:08:
0e:89:18:8d:22:ac:1e:1c:01:17:a9:c1:e2:fd:a1:dc:c3:cf:
24:b0:73:42:70:a8:05:f4:67:b7:10:42:3d:01:c9:64:b4:ee:
7d:d4:59:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:32:50 2025 by rpki-client