Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
File: 1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer (raw, json)
Hash identifier: ficewn4HFY0aVN7+PIdt+GYqI7DqdGSUq9iUR3g9a2E=
Subject key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02360D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 06 Mar 2025 19:39:00 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 103.47.176.0/22
IP: 202.58.20.0 -- 202.58.27.255
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144909 (0x2360d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 6 19:39:00 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91CE959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4d:1b:79:30:fe:b2:5e:e9:2d:f0:d9:a1:52:
58:c8:14:25:63:7d:a0:1d:22:32:d9:51:c1:37:4b:
05:bd:8c:35:0d:73:cd:12:5b:ce:ad:fd:0f:ee:36:
68:b6:e9:50:5f:75:4c:58:00:da:e4:9d:b2:06:0e:
1d:e6:d9:e6:da:9e:7e:a1:d1:f5:57:21:32:83:35:
5a:d5:6a:f5:55:03:35:e8:6c:65:75:3f:77:7e:38:
e6:9a:42:b8:23:3b:4b:62:27:ca:f4:11:31:b2:6d:
f4:0c:c0:63:5f:91:8e:a8:34:8a:1a:5a:43:1b:bf:
3f:37:26:a0:42:75:1a:78:52:eb:7c:6d:9d:b0:12:
15:15:bf:a5:36:e0:71:0f:7a:e2:77:4c:c6:cc:f5:
c2:72:25:39:35:16:39:c7:89:d7:59:95:1f:f8:4c:
cd:b1:5f:57:4e:af:a5:bc:c9:2c:87:25:5a:51:33:
d9:77:9b:55:03:3b:f7:d3:74:c7:48:5b:d8:a0:70:
06:6b:58:42:b6:74:be:70:6d:57:86:bd:bb:55:93:
5c:60:27:9d:79:07:10:f8:13:08:a6:6c:9a:4b:83:
d0:dd:75:a5:9c:8a:0a:4a:a9:db:82:f9:73:e8:c7:
06:cf:15:55:58:37:74:5f:78:26:af:31:ae:ae:9d:
6a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.47.176.0/22
202.58.20.0-202.58.27.255
Signature Algorithm: sha256WithRSAEncryption
12:be:30:21:22:18:b9:39:e6:37:98:3a:0f:57:e0:06:3e:a5:
4e:5f:36:26:d0:20:65:5a:93:fb:b0:52:83:19:da:e4:0b:25:
d1:48:6c:7a:fd:c7:bd:af:aa:27:47:c6:d7:c3:f8:55:f9:61:
93:41:ae:c1:a0:e0:6f:15:14:8b:b7:f0:12:3a:ea:f4:4d:97:
7c:00:6e:7d:0f:08:17:f5:71:4e:4a:a2:fd:cc:9b:87:5c:67:
81:3c:38:c7:a0:c9:d0:93:71:35:3c:b8:0f:bd:3a:e1:ae:7f:
08:f4:51:48:30:34:c7:52:24:ed:7a:9c:c5:7d:0e:fb:73:63:
19:fb:37:ff:57:3a:27:2a:ed:d2:67:5f:2e:62:e6:c6:97:8a:
bc:cf:46:8b:8d:b9:54:90:e8:af:b6:dc:f7:86:3d:34:50:69:
1c:36:38:be:5a:0e:f6:9b:6b:88:83:86:4f:65:6d:cc:8f:a3:
37:24:50:46:39:f7:29:d9:8d:33:a7:da:a5:b3:4d:f2:b9:22:
da:82:86:ef:16:20:ac:02:56:4d:af:ba:d6:88:5d:76:b0:20:
9c:8d:40:30:1d:8c:aa:63:1b:2d:08:bc:14:f4:e7:4e:35:4c:
4a:a9:1c:60:5f:49:17:9e:4d:44:36:63:4c:ce:93:ec:b0:bd:
93:d3:dd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:10:15 2025 by rpki-client