Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntVkKdGun2AE-2-2eI6T-vYiV1k.cer
File: ntVkKdGun2AE-2-2eI6T-vYiV1k.cer (raw, json)
Hash identifier: 1/VvIRlwMtxUluOK6dclryCwTyAY7+2JbSej8FpXfng=
Subject key identifier: 9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024EBA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 17 Jun 2025 15:11:04 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 4841
AS: 9219
IP: 202.27.91.0/24
IP: 202.69.208.0/20
IP: 203.13.166.0/24
IP: 203.191.132.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Jul 2025 06:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151226 (0x24eba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 17 15:11:04 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A9142769, serialNumber=9ED56429D1AE9F6004FB6FB6788E93FAF6225759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:45:27:66:4d:5f:ae:29:8e:82:62:c5:bd:
c7:70:e0:7a:06:b3:65:1d:f7:2d:bd:fb:0e:33:4c:
db:28:2a:63:a4:a3:be:41:60:9b:ff:ae:ba:1a:bf:
05:b5:29:1b:0f:c3:58:8a:96:27:19:19:c5:47:a9:
18:14:0e:23:50:61:a7:12:f9:47:13:e5:c8:fc:a4:
7d:72:b9:ee:1b:03:de:fc:90:1f:18:5f:62:3b:38:
56:5d:8a:34:7c:35:91:89:6f:64:64:93:f2:2a:ac:
03:c5:f6:a4:6c:75:3b:03:d1:e8:46:97:52:7b:6c:
5d:d1:86:f4:43:c3:8e:5a:33:99:9b:6e:2e:ac:29:
32:f9:fb:15:9d:3e:24:94:38:25:84:48:5f:96:b4:
c7:43:2b:f3:9b:ee:82:a1:13:f5:fa:e4:5d:b6:05:
21:38:5e:63:cd:5b:e2:b4:df:be:77:a8:15:02:a3:
63:b9:36:79:e1:2f:a7:3c:c8:43:eb:71:d0:5f:ce:
e2:3a:19:cc:42:a0:c9:ca:05:c6:82:df:15:67:8b:
b2:82:b7:4c:d4:c5:60:70:de:26:a4:3d:33:6e:5f:
1e:6c:e2:00:c0:2c:92:2f:ce:ca:8f:a1:b1:5b:19:
3e:13:56:68:df:f7:ff:ef:5b:ce:02:04:ca:b0:b2:
a8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D5:64:29:D1:AE:9F:60:04:FB:6F:B6:78:8E:93:FA:F6:22:57:59
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9142769/46BD55C24B8D11F0A3F4FF3FC4F9AE02/ntVkKdGun2AE-2-2eI6T-vYiV1k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4841
9219
sbgp-ipAddrBlock: critical
IPv4:
202.27.91.0/24
202.69.208.0/20
203.13.166.0/24
203.191.132.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:63:a6:ab:9f:74:bb:0d:d8:68:86:a5:28:b3:da:6e:06:ba:
3f:11:b8:e1:00:6e:16:6d:1a:24:23:d3:8b:99:f6:42:94:a3:
7c:90:37:fe:03:4f:15:ff:aa:2c:62:0e:81:13:80:89:4c:c7:
29:1f:6d:0a:16:ac:82:3e:67:03:ba:da:40:d6:7a:9e:8d:93:
be:98:51:67:2d:00:9d:e9:99:0b:c9:56:d7:e5:c6:f8:e1:28:
09:b9:65:d7:a5:3e:fe:8b:0e:56:87:fe:ed:02:06:1f:fc:b5:
50:15:b8:3d:e5:44:e8:b7:f3:41:74:f2:88:f8:d5:80:e6:ed:
22:b5:60:64:ba:94:84:50:b4:67:94:5d:08:69:7b:8e:c9:52:
d0:d5:11:2f:ef:6e:6b:68:ef:74:17:3e:68:43:fa:34:a2:0a:
51:32:a9:0f:5d:30:50:09:3d:2a:6d:a7:44:e8:c8:2e:cb:5a:
ea:48:7b:40:02:c0:c5:28:9b:40:3f:b3:ef:79:05:97:4b:39:
d9:08:3a:2a:a4:de:e6:1a:95:7d:8a:0c:b1:26:1b:6c:ca:71:
22:67:27:c6:4e:42:3f:a7:7c:5d:16:40:c3:bc:6c:ce:6a:ca:
8a:c4:96:a4:3c:f9:cb:28:2d:cf:30:f4:a3:9b:93:f8:b0:61:
c0:f4:c3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:22:53 2025 by rpki-client