
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ZVULlIPSK9153kD6majnGTB0KM.cer
File: 1ZVULlIPSK9153kD6majnGTB0KM.cer (raw, json)
Hash identifier: kSxOvoLNa0RbbL6jpqYdUjdpZKu9w7ycaqfxn1Sg7/E=
Subject key identifier: D5:95:54:2E:52:0F:48:AF:75:E7:79:03:EA:66:A3:9C:64:C1:D0:A3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023783
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 14 Mar 2025 14:58:57 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 7598
IP: 103.1.196.0/22
IP: 116.50.56.0/21
IP: 2400:5e00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145283 (0x23783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 14 14:58:57 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9175866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:bc:b8:15:d4:67:c8:46:8d:c3:24:e1:df:
ab:59:b4:31:58:a0:f9:33:fd:7f:15:bb:a0:e5:7c:
e9:d1:41:01:db:17:d9:45:b5:f7:41:1a:53:97:5c:
83:95:9e:a4:0e:56:fc:ae:e7:8b:78:27:b1:09:aa:
de:f0:73:13:26:82:3f:83:e0:d7:ef:55:23:4c:20:
fc:d3:93:c6:8f:5c:a7:49:d8:77:52:5d:74:e3:6f:
79:98:80:9c:51:f0:4f:13:df:bc:ca:af:ff:07:c0:
c8:ac:ef:e6:7b:f5:56:a9:0a:32:ca:ff:b3:e5:4c:
33:92:13:21:8d:37:0f:d9:e3:13:6b:39:30:04:c8:
8d:51:16:df:a3:84:9d:4b:c7:8f:75:1d:53:fd:3c:
2e:ea:67:0f:1d:84:eb:89:a0:9a:df:fb:ee:ab:8e:
52:20:57:32:b2:35:0c:85:a9:77:c1:1a:21:87:ae:
7d:b2:98:ed:9c:59:bb:32:85:2e:cc:bb:cb:46:07:
66:01:39:9c:f5:78:78:85:75:27:1d:7b:85:32:67:
6e:85:37:a7:59:76:6e:b1:9a:95:5c:dd:a7:18:46:
dd:45:00:44:90:28:47:e7:1b:e1:ae:e1:59:50:35:
a6:1b:41:ba:3c:58:36:f3:b9:12:5d:4d:d6:2d:c0:
b2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:95:54:2E:52:0F:48:AF:75:E7:79:03:EA:66:A3:9C:64:C1:D0:A3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7598
sbgp-ipAddrBlock: critical
IPv4:
103.1.196.0/22
116.50.56.0/21
IPv6:
2400:5e00::/32
Signature Algorithm: sha256WithRSAEncryption
ab:40:d0:fa:81:39:15:f1:c2:39:9a:18:2a:1d:90:a9:84:73:
e3:07:e8:c4:c1:ca:dd:56:eb:70:5c:6f:a8:79:9b:0a:73:0c:
a0:02:d9:79:4d:3a:37:f0:0a:b2:26:1b:9e:8c:f7:01:62:42:
b8:50:1c:4e:7f:fe:b7:be:c4:1a:1b:0b:a1:0a:06:10:9b:48:
66:88:bf:3e:1e:e3:23:a5:f6:db:41:a5:cd:4e:05:7b:8c:3d:
b6:31:f8:23:62:e2:9c:f5:dd:97:d0:1c:65:4a:b9:40:2e:dc:
7a:2a:08:cc:cd:25:8c:b2:43:09:f1:bf:2e:3c:5b:bc:ec:8d:
37:de:f5:9b:26:cf:76:10:39:f3:3b:a5:d8:b9:93:e9:81:d1:
97:63:be:02:d2:b0:68:87:fe:1c:fd:3e:7f:cc:a2:cb:87:36:
03:a7:5e:23:66:f9:a1:bf:a1:76:99:96:f6:1d:d9:40:77:76:
3a:8c:a4:cf:50:3e:b6:c8:75:c8:0a:ec:aa:ca:e2:47:df:c6:
28:f9:73:b3:81:01:1b:3e:c9:6c:0e:22:bd:51:c3:3d:8f:06:
6f:45:65:13:c5:10:97:01:00:5f:82:f2:9f:47:22:1c:44:06:
68:bf:3e:fb:ab:a1:26:a1:6c:a0:be:f7:58:8f:75:34:06:62:
5f:4b:f3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:13:37 2025 by rpki-client