Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer
File: nAOc5JtXef24TeO2mPZ26EQjZnk.cer (raw, json)
Hash identifier: wWCypEs35bBMjJJyVQg88W/6X8k9j5Ex5g4mzkOFAE4=
Subject key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024F27
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 19 Jun 2025 13:02:06 +0000
Certificate not after: Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources: AS: 63989
IP: 103.58.148.0/22
IP: 202.9.89.0 -- 202.9.90.255
IP: 202.94.166.0/24
IP: 2402:6880::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 19:41:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151335 (0x24f27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 19 13:02:06 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e9:d3:0f:14:8f:2d:bf:39:27:c4:57:d9:c4:
d7:3b:05:04:f9:ba:99:63:88:2e:7d:aa:b6:63:21:
ca:1a:25:85:14:0a:10:d8:c4:dd:16:2d:ad:07:35:
6e:04:75:82:5e:c0:c9:d0:2c:ea:7c:8e:a8:68:20:
7a:2a:14:49:ef:05:0b:6c:f4:07:1e:10:15:d2:5d:
ca:da:c0:d7:5c:77:44:97:7d:c8:7f:5b:3b:5d:0a:
9b:70:f0:00:42:0b:40:42:a1:b0:6b:f3:26:22:ae:
90:f8:56:57:74:73:37:b3:de:62:62:2c:71:d8:53:
b2:ca:3e:5d:bf:7d:bb:20:03:66:2e:8e:d2:a8:a5:
c8:fe:3d:85:53:b4:ff:86:7a:48:34:1b:25:d9:55:
af:cc:ba:5c:16:ef:9a:8f:9e:b8:ee:81:4f:d8:25:
2a:26:8f:9c:2a:4d:4c:63:ac:c3:1e:d0:26:86:ac:
df:64:73:7f:5f:e4:04:52:f6:19:56:88:06:cb:fc:
2e:bb:cd:d6:10:c6:7c:2c:20:2b:9f:95:aa:42:1f:
55:ab:0e:7a:f9:4d:18:d4:cb:2c:bc:36:b8:a9:05:
0a:95:8a:c1:92:8a:d0:97:89:89:2a:0a:82:42:d0:
77:8a:57:aa:14:fc:4e:7d:bf:ec:08:2d:b2:e5:5b:
62:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63989
sbgp-ipAddrBlock: critical
IPv4:
103.58.148.0/22
202.9.89.0-202.9.90.255
202.94.166.0/24
IPv6:
2402:6880::/32
Signature Algorithm: sha256WithRSAEncryption
56:47:8c:30:7f:58:44:d8:4e:47:3b:08:c6:7b:26:c2:41:0b:
08:6f:81:c2:a1:1c:4e:84:08:da:8f:2a:3d:57:7c:a4:ca:61:
4a:17:75:60:c4:09:d3:c0:cb:21:ff:49:c3:2d:6c:3a:11:51:
f4:04:95:97:84:4d:e2:bb:ff:70:24:0f:9c:c6:e8:79:b4:34:
73:ac:95:52:c6:a4:c6:9f:46:ea:c2:f3:a1:d4:74:80:95:14:
5d:ae:d0:1d:3c:e0:7a:9f:da:ec:7d:84:b0:1d:43:d9:3d:0c:
74:aa:1e:87:23:2e:d4:ba:ea:dd:07:1f:67:9c:e4:a3:05:75:
ca:50:12:93:21:4c:03:6a:d7:47:d5:e1:52:93:e3:5a:e8:cb:
82:18:40:ad:90:a1:fb:df:2e:36:74:28:9e:70:2a:c1:20:ff:
d9:f9:25:a5:54:db:bf:40:ab:aa:d9:c7:a8:50:e2:a2:e5:81:
5a:b4:f4:a0:60:c5:97:0c:da:1b:3f:eb:35:42:5d:93:41:9f:
3b:20:90:00:08:6b:3d:d0:a6:c2:e9:15:7e:56:a0:06:4b:7b:
e1:c5:e0:c9:fb:81:01:e6:fb:0b:45:51:84:31:29:ac:23:a2:
07:63:3d:0f:6f:ff:73:7d:3d:09:1a:69:83:24:78:71:38:25:
29:c1:e1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:05:58 2025 by rpki-client