Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
File: wSlv-tNPKfBODvrV2SRMAqfYfY0.cer (raw, json)
Hash identifier: BPvIFZ0DnbLSRljLRU5KLbD7tnz8Gv5h1tTeEHc2HuI=
Subject key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02415E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 28 Apr 2025 14:43:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 7604
AS: 18195
AS: 37996
AS: 45145
AS: 131479
AS: 132145
AS: 132873
AS: 133060
IP: 103.6.12.0/22
IP: 103.25.112.0/23
IP: 103.241.200.0/22
IP: 119.252.64.0/19
IP: 122.202.64.0/20
IP: 180.233.128.0/22
IP: 202.74.160.0/19
IP: 202.191.4.0/22
IP: 203.7.224.0/23
IP: 203.19.12.0/24
IP: 203.22.25.0/24
IP: 203.23.208.0/20
IP: 203.24.54.0/24
IP: 203.25.26.0/23
IP: 203.30.19.0/24
IP: 203.30.34.0/24
IP: 203.31.0.0/24
IP: 203.32.124.0/22
IP: 203.34.30.0/23
IP: 203.55.198.0/24
IP: 203.56.98.0/24
IP: 203.124.176.0/20
IP: 203.196.92.0/22
IP: 203.209.160.0/20
IP: 2401:400::/30
IP: 2403:1900::/32
IP: 2403:3400::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 May 2025 18:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147806 (0x2415e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 28 14:43:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91AF59C, serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:88:80:b4:c2:ab:dc:69:c8:6e:f4:0f:77:
42:0f:d7:db:a6:68:bd:a7:4c:23:13:a2:1b:eb:00:
6e:1d:45:05:05:05:bc:e7:26:a6:27:80:a8:65:01:
b0:bb:cd:ac:28:d9:76:89:09:2e:f8:bc:c0:27:b0:
d6:65:35:41:71:59:75:b3:d8:5d:06:38:d0:ba:96:
2b:ad:35:3a:f5:50:9e:37:18:64:ae:1f:2c:ce:9f:
20:ca:fe:10:a8:b7:67:60:a8:50:11:8d:27:71:b0:
70:c3:53:7a:4e:3d:77:b3:29:4d:a7:45:4e:6e:11:
aa:62:0c:c6:fe:bc:7f:be:cb:83:e2:5f:e5:f5:1c:
1b:90:a1:ed:98:22:7b:9b:3b:e4:3a:7e:ae:28:7d:
e6:eb:1a:c3:c7:63:af:ba:2b:de:8e:44:63:11:7c:
c8:2a:bd:2c:e8:cb:9c:1e:9d:80:f2:c4:44:45:33:
e1:14:a5:3a:c5:cb:1a:1a:9c:ae:5c:8d:5d:fb:4f:
c1:8d:7b:ef:c1:3f:eb:36:0d:81:b3:6e:f0:6c:f8:
7f:39:b9:75:28:4a:6f:8a:6b:4c:55:18:95:a1:d0:
da:cd:83:69:dd:04:c6:2c:c8:6f:88:f3:b6:82:a7:
f5:ee:f1:33:ef:58:31:e5:13:c1:81:db:94:50:5b:
21:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7604
18195
37996
45145
131479
132145
132873
133060
sbgp-ipAddrBlock: critical
IPv4:
103.6.12.0/22
103.25.112.0/23
103.241.200.0/22
119.252.64.0/19
122.202.64.0/20
180.233.128.0/22
202.74.160.0/19
202.191.4.0/22
203.7.224.0/23
203.19.12.0/24
203.22.25.0/24
203.23.208.0/20
203.24.54.0/24
203.25.26.0/23
203.30.19.0/24
203.30.34.0/24
203.31.0.0/24
203.32.124.0/22
203.34.30.0/23
203.55.198.0/24
203.56.98.0/24
203.124.176.0/20
203.196.92.0/22
203.209.160.0/20
IPv6:
2401:400::/30
2403:1900::/32
2403:3400::/32
Signature Algorithm: sha256WithRSAEncryption
d4:db:82:4c:4a:e1:d8:7a:8e:53:b5:f3:1e:0e:8d:9a:fb:80:
1c:cc:81:ae:7d:fa:0b:0d:dd:75:2e:3d:a0:3d:23:61:d5:32:
e7:68:01:58:e5:24:c7:73:ec:2b:f8:8d:61:c9:90:9b:0e:f4:
dc:c8:8c:d5:92:44:3c:bb:62:ad:95:90:ef:14:f0:c3:8c:d3:
8e:48:b5:1b:9d:50:b8:01:d0:8b:f6:26:7d:cf:7c:0f:75:0f:
9b:26:da:fa:1c:ff:b5:76:7c:2c:2a:69:9f:5d:76:30:78:3c:
4e:75:93:c8:8f:50:3d:55:40:70:d5:e8:be:4e:c9:6d:eb:46:
7e:dd:7b:0d:e9:45:01:d5:97:93:9c:bc:9b:b2:ff:7a:cd:27:
8c:c1:7d:1a:7b:5b:8a:38:22:45:dc:54:b3:08:d2:dd:ea:67:
95:5d:e8:44:5d:0f:e3:6b:44:2f:cc:9a:6c:2c:83:3c:65:7c:
d8:b4:e6:4d:7d:85:dc:9a:c9:53:f1:7f:15:80:7b:fa:09:15:
34:ff:d7:71:ab:3c:42:35:01:a9:13:c1:22:81:8e:8f:2a:7e:
66:42:91:5d:e6:82:09:ca:67:0e:64:44:3f:53:4c:87:de:1d:
f4:bd:68:b3:5e:e0:8c:ae:40:2a:5e:71:1a:d1:99:17:75:b7:
b3:00:db:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 22:13:27 2025 by rpki-client