Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
File: wK73B39SYiVnF5rOVq1e6M1kYE4.cer (raw, json)
Hash identifier: +UfZ3ab3fIoP6tWj+q57YrWFeYYGhHFkVBB5Hmm57fA=
Subject key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024EFA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 18 Jun 2025 16:23:56 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 103.188.179.0/24
IP: 2001:dec:4000::/48
IP: 2400:9460::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 19:41:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151290 (0x24efa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jun 18 16:23:56 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A917B0F6, serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:b4:cf:f3:90:b5:ef:1b:8b:ef:b1:46:35:
de:48:0b:08:be:75:7c:1e:5d:37:d9:e2:00:41:ed:
dd:65:47:30:c0:22:a4:52:70:d0:3f:19:fa:23:e2:
16:a1:0d:c2:15:20:e8:84:65:1c:28:1a:72:62:cb:
ae:15:de:b7:81:bf:43:da:65:e7:a3:9e:7d:a3:25:
50:49:38:22:1a:9b:95:bf:64:d5:e9:b4:21:e7:96:
93:af:ac:f0:3d:94:4b:1b:85:f0:86:ce:db:de:7c:
1b:71:de:14:27:9c:d9:9f:e9:9a:64:3d:ab:e8:73:
63:37:85:a2:09:76:53:bb:6e:98:1c:ac:2e:c4:f5:
40:1e:2c:88:27:04:13:c2:fb:54:f0:6d:92:89:9a:
d9:5a:3f:db:07:db:93:e4:2c:c6:e6:ea:41:d2:3d:
b4:c5:fe:d6:5f:d6:42:fc:86:6f:53:6a:94:15:cf:
1c:a4:2e:36:81:1d:81:73:89:b5:f4:7b:6d:2f:1d:
55:20:25:aa:45:87:fe:9c:97:6c:ad:42:f5:36:97:
83:e0:f1:09:42:8b:f3:72:39:b1:57:bf:6e:d2:ae:
03:bf:fa:e6:14:f1:59:2c:c4:a1:95:60:b5:c9:01:
ed:19:b9:20:b4:93:71:b7:4f:3a:d1:57:8e:f9:83:
82:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.188.179.0/24
IPv6:
2001:dec:4000::/48
2400:9460::/32
Signature Algorithm: sha256WithRSAEncryption
8a:7e:c1:68:56:94:a7:3a:8b:d1:fa:d6:64:19:b7:d0:65:fe:
18:e4:a4:4a:9a:c3:cb:ce:be:f8:b4:cd:74:f9:5a:c5:49:c8:
a3:7d:2b:bd:20:f2:53:78:2d:83:84:25:57:07:ca:b0:42:cb:
8d:3b:e8:4d:4c:fa:d6:dc:f8:e5:59:77:6d:8e:00:4b:aa:c2:
09:04:38:63:3f:e6:3c:58:2d:a1:11:a3:f9:e0:2a:bb:59:91:
d0:03:2c:5e:31:93:01:dc:c3:c9:3f:41:c7:66:27:c0:73:b4:
b8:f1:1e:11:2a:47:fa:c6:c6:b4:99:d8:50:f2:d9:5d:55:c9:
96:a5:27:5d:74:15:98:f0:e0:4d:50:70:09:f7:a1:45:b0:d5:
5c:8a:7f:09:70:62:81:0d:54:aa:cd:78:2d:74:f0:08:80:c3:
ca:bf:d9:62:a4:78:de:6b:c5:76:79:48:2d:42:07:a8:24:5c:
26:4c:69:7a:75:87:f8:6e:f7:2a:2c:31:9c:9c:54:d7:bb:30:
ad:5c:85:ba:1d:fa:46:cd:8a:53:a5:91:a0:ff:35:12:7b:83:
c2:92:84:ee:7a:16:e8:a5:59:07:b0:67:fb:ed:23:bb:98:f6:
d5:f7:91:ee:c1:52:66:87:90:d9:1b:07:49:37:82:1f:aa:b2:
c4:96:c7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:29:25 2025 by rpki-client