Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer
File: rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer (raw, json)
Hash identifier: Y4bhz0QR0FOloxyFu5aeH675/N0X4+4E6x616EmcWks=
Subject key identifier: AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 025203
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 01 Jul 2025 06:26:26 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 152913
IP: 2401:a660::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 22:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152067 (0x25203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 1 06:26:26 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A9134B4A, serialNumber=ACCBF26A19D9E14C31F5F37E1B966D86A504B46B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5f:51:ab:66:3f:eb:5f:cc:8d:4c:c3:bc:73:
8f:4b:6b:c4:e5:84:e2:7e:fb:5f:c3:e5:a2:c9:d2:
76:0e:97:c2:47:d2:6e:38:08:51:89:0e:38:18:ff:
2a:28:d4:4c:a0:23:04:ec:24:94:66:fa:fb:0d:b3:
2d:aa:c4:db:f7:54:a0:01:24:13:5a:93:49:81:ae:
ac:c7:67:ab:0c:54:e1:eb:5c:1c:19:47:fb:a8:57:
99:d4:48:9c:e0:97:95:fb:dc:0d:f3:30:39:38:48:
2b:0f:a4:cd:d7:93:54:1f:8d:21:d3:9b:a7:89:eb:
4f:ae:c8:33:7e:c5:ab:f6:d6:5c:24:82:d8:e8:24:
62:8e:b6:0e:23:dd:14:1c:58:82:ca:c3:6c:d8:09:
75:a1:d6:18:fe:16:0c:3f:99:c0:1f:7a:51:31:b6:
92:9b:5d:5f:c2:ce:5a:22:76:4a:3c:5f:18:c0:b1:
73:93:8f:ad:9a:2f:b6:90:ac:67:c3:9a:bb:a5:a7:
c3:2e:70:4a:a2:48:12:f9:d2:e4:7d:59:f2:cd:b9:
b2:41:6e:d1:05:15:c6:13:44:b0:36:2a:92:0c:56:
11:e8:88:d4:73:da:46:1f:b8:7c:cc:59:cb:88:40:
9c:ee:35:dc:70:9c:56:f4:25:87:d7:8a:6f:20:f1:
13:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152913
sbgp-ipAddrBlock: critical
IPv6:
2401:a660::/32
Signature Algorithm: sha256WithRSAEncryption
93:c6:f2:65:bd:b0:f1:8d:2d:b2:89:fa:78:f3:af:ae:cd:47:
53:82:9c:75:07:23:59:7c:bf:59:0e:95:9b:b4:e5:74:69:46:
c0:15:57:50:75:6b:37:81:7e:79:ca:d9:20:c5:42:a3:63:13:
89:33:a1:a2:9d:5f:cb:dd:5b:75:7d:57:84:88:5c:fd:a5:b8:
10:a3:12:f1:a1:fe:28:1f:f1:54:dd:63:d7:84:c9:84:9e:19:
a7:f2:55:3f:e0:f4:8c:46:24:b7:6e:29:8e:15:e5:bf:ed:d8:
32:6b:46:b8:91:31:aa:1d:0e:c5:5c:93:ee:be:f5:c4:ea:23:
f9:67:d2:12:73:d3:64:af:bd:3f:e4:66:af:bd:49:dc:6f:49:
d7:b4:be:bb:31:e0:c9:82:b0:44:b5:ca:66:28:7f:b2:bb:58:
75:b8:88:62:9a:34:41:b5:70:20:ef:61:9f:65:e1:d9:ac:67:
07:b8:ff:c8:dd:19:b7:45:fb:11:a9:1c:c4:ea:4f:ba:8e:d9:
ca:0e:a2:19:7d:a6:59:fc:c1:7e:06:52:48:56:2a:3b:d5:9b:
ca:83:6c:ae:72:18:80:cb:d7:38:d8:91:b6:9a:a7:6e:52:0f:
a4:dd:0c:2a:43:65:ef:84:c5:76:25:00:3a:3c:de:16:6e:0e:
6f:d4:76:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:34:34 2025 by rpki-client