Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer
File: l5f3hScG7hxCxopeRQtXL47lCBg.cer (raw, json)
Hash identifier: A6hl5SKZRsphMa3JOuOArekX9LmrA1uDuww2bedf5FU=
Subject key identifier: 97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02430B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 01 May 2025 16:30:41 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 140524
IP: 103.150.20.0/23
IP: 2001:df3:4e80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 May 2025 18:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148235 (0x2430b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 1 16:30:41 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A9149063, serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:47:8f:fc:49:26:54:af:a6:1d:cb:0f:9f:07:
7d:22:8e:54:10:73:aa:65:0f:a8:05:04:60:04:f4:
79:a7:b7:b1:8c:f3:2b:35:1a:84:05:fd:3a:14:12:
ed:f2:d3:66:8a:6a:49:f7:97:bd:63:57:64:68:2a:
86:91:22:b2:23:7b:64:51:96:60:f3:7b:49:c7:f9:
f2:40:fa:5b:d3:aa:a0:e3:84:cb:af:e9:32:10:7d:
20:85:82:8e:c2:7b:a0:49:94:d5:59:f1:99:c5:86:
34:a0:52:e5:8f:24:58:1c:85:27:4b:22:d6:f6:1f:
f6:ec:e2:42:0f:59:18:dd:33:cd:25:fe:66:45:0b:
d9:e0:6d:4d:c8:2f:ef:74:a1:ae:47:92:70:3e:92:
f8:6d:ed:f8:a3:d1:67:1d:19:c4:94:c7:52:e4:21:
d9:b9:75:3c:c3:c1:90:b7:ee:e8:18:8f:ab:31:b7:
ce:c0:da:bd:c6:58:7e:0f:0c:9e:04:e5:da:ef:03:
b0:d4:49:80:87:21:15:83:ac:7a:f1:1c:09:b6:e0:
2c:be:95:97:5e:d5:f3:4e:b2:59:3e:12:11:a3:e9:
45:52:28:cf:58:8e:40:6a:0a:05:37:69:6d:ee:4f:
a0:24:77:44:e3:0a:e3:c8:49:81:b7:76:97:63:b8:
73:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140524
sbgp-ipAddrBlock: critical
IPv4:
103.150.20.0/23
IPv6:
2001:df3:4e80::/48
Signature Algorithm: sha256WithRSAEncryption
b1:ed:04:d7:96:e9:8b:67:62:a4:e1:87:65:37:cc:b6:89:f7:
ff:27:f3:8a:4f:7f:ab:be:b7:cf:c4:cf:42:6c:9d:e1:3c:fa:
08:9c:3c:b2:ad:4d:bf:1d:4f:09:7b:d5:45:de:97:c2:57:c3:
d6:ca:c5:8c:45:7f:56:59:be:fd:d6:94:0d:75:23:2a:38:9b:
7a:a7:7f:23:e4:c8:2b:53:01:49:fa:2e:5b:27:a8:66:43:12:
07:5c:40:eb:22:af:76:95:5d:6a:90:66:fb:13:e6:84:ba:f9:
3e:1d:31:fc:7b:f4:9b:9e:06:b3:11:5a:4c:b8:fa:e7:9c:f7:
19:e5:76:2d:da:85:f2:fd:33:b4:13:7b:bb:68:11:ae:d9:0e:
72:c5:8e:31:77:93:6c:8f:82:52:b3:10:58:ea:53:54:12:0c:
9b:8b:f1:3b:c9:7c:eb:05:73:c4:62:0c:15:a8:49:29:4b:8a:
e4:ee:ad:2e:3e:e8:33:42:67:28:7c:67:c1:8f:fc:ea:3b:fb:
d0:dc:17:94:a8:45:23:bb:6c:36:d7:1a:1d:63:0b:d3:bc:3f:
a9:30:91:28:2b:88:78:fd:e8:c6:48:01:0a:a1:54:a9:e6:08:
17:e7:de:dc:d4:06:5d:19:99:e3:dc:b8:e3:b4:5e:cc:33:fa:
b7:e5:41:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 4 21:48:22 2025 by rpki-client