Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer
File: nL-xN0vpMpetwbIdvTeY0VvSdN8.cer (raw, json)
Hash identifier: GhgHSxCAWTfGMadnaCxexgMSpBEtWYTiJeAH3TaXuyA=
Subject key identifier: 9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024E43
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 15 Jun 2025 13:34:30 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 137467
IP: 103.244.184.0/22
IP: 2402:c6c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 20:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151107 (0x24e43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 15 13:34:30 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A9152696, serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1a:e9:f9:3d:7b:d5:93:50:1e:e8:ec:44:99:
86:fe:91:0c:ce:eb:4b:d0:4e:4b:41:64:6f:30:c4:
13:e8:4f:7e:9c:87:5a:77:fc:e1:d7:db:aa:a7:a3:
59:7d:39:39:99:b5:e0:72:3c:dc:a8:80:19:1e:d4:
43:4c:47:81:9f:a7:d6:77:aa:4d:7a:eb:69:5f:f4:
93:55:b2:ab:d4:14:50:e6:b8:cd:ce:f0:95:34:b4:
d3:18:df:93:05:f1:f0:6d:16:a0:f0:0b:3d:0f:63:
b2:ba:b2:f0:b7:0b:83:2c:d3:fa:f3:4a:1d:b8:01:
ab:99:d4:a2:ef:a1:24:42:52:c0:8b:54:43:36:ba:
d6:1f:c7:29:94:ee:53:1c:26:d2:dc:be:26:68:4a:
e2:cf:de:27:e0:53:46:4e:aa:f1:09:4b:91:81:32:
29:54:af:26:fa:e4:37:11:7f:e2:af:5d:bf:94:a6:
95:df:d3:1f:1f:05:1e:30:ac:c2:92:50:aa:da:0e:
d7:89:54:62:95:d7:39:92:c1:48:19:3f:a0:0b:d3:
e1:6f:a5:bc:a9:cc:53:eb:3e:8e:40:62:e8:93:2e:
80:aa:11:c8:a8:3d:2d:f6:67:8f:89:1c:67:82:10:
a4:d3:1b:0c:76:b7:74:a5:1c:47:67:2b:29:e2:59:
85:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137467
sbgp-ipAddrBlock: critical
IPv4:
103.244.184.0/22
IPv6:
2402:c6c0::/32
Signature Algorithm: sha256WithRSAEncryption
98:b4:39:88:7f:a2:90:12:12:05:a7:82:1e:e9:56:c0:59:8e:
a1:b4:87:af:a8:46:31:b6:53:87:60:7c:00:39:e4:9d:68:50:
98:67:55:04:64:13:00:cd:aa:06:eb:70:53:5e:e8:27:ec:a7:
5a:23:73:49:72:94:23:31:80:a0:fc:0f:f0:50:c7:48:0e:31:
16:4c:2e:71:d7:19:b6:af:76:47:e7:9a:58:be:8d:0f:16:b9:
b9:3b:84:ca:6b:d7:7d:63:a8:6e:14:31:d9:7d:8a:5a:71:77:
09:9b:1f:e3:66:3a:c0:3d:ab:29:6d:39:ec:6f:51:2f:94:da:
d0:d4:a0:3c:ef:eb:f0:9f:54:eb:27:84:bf:52:7c:a6:99:24:
c5:75:80:eb:8e:ef:c4:ad:65:9c:4e:87:0f:b4:e6:7d:94:ea:
ed:86:28:5c:e9:f5:ee:24:ab:2a:e8:ea:02:8b:a4:df:56:78:
c3:63:e1:0d:f8:4b:aa:86:66:69:d8:8c:e6:e6:b6:d7:3d:df:
9c:e5:00:46:c2:4f:29:d0:20:fa:4d:6f:0e:e5:2c:d2:29:e8:
12:3a:a5:80:62:cf:b7:f4:19:3d:12:a4:0c:1e:58:76:07:70:
b5:cf:7a:76:c8:16:a9:0c:13:50:49:b8:51:65:06:fd:71:cf:
ae:10:b3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:23:31 2025 by rpki-client