Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
File: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer (raw, json)
Hash identifier: IzxjuDTD6V8wi0Gd0Hatu10IrXFBqLQI5dpWjP8z9qY=
Subject key identifier: DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022128
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 06 Dec 2024 18:26:53 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 103.95.77.0 -- 103.95.79.255
IP: 202.176.15.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139560 (0x22128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 6 18:26:53 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91AEAE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:ec:71:97:3b:70:a6:04:8f:a7:7b:cd:f2:
15:f1:15:92:c7:1d:08:13:89:71:b3:51:7d:77:cc:
66:7e:2f:4a:b2:8c:63:97:83:63:43:0c:98:5e:79:
13:f9:b0:27:61:9e:8c:a9:5a:37:17:5b:c5:ed:25:
8a:3b:30:32:42:c0:a1:73:4e:35:f5:f6:e3:60:5c:
23:4d:71:db:2c:4d:43:66:41:5c:58:f1:b7:8a:a4:
7e:16:a9:07:b9:99:bc:eb:a2:bf:02:b6:ff:41:18:
1d:a4:9f:bf:89:5d:1e:13:4f:e8:8f:a9:a2:af:9f:
a3:1d:a8:30:ab:b0:ad:ce:83:fe:a3:2e:c5:35:c9:
89:0f:38:3e:65:b8:fa:b8:73:a0:cc:12:c2:0f:6c:
d1:75:c3:e2:40:e3:54:f5:22:5e:00:75:1f:fc:bc:
46:5f:9c:e7:c0:ae:85:ba:85:b3:da:da:10:e9:c1:
a7:ff:f6:9f:fc:43:75:07:51:53:bd:65:d6:70:67:
38:34:10:14:4a:61:27:b1:da:3c:b9:a4:b4:c9:f2:
f3:00:7a:b2:9e:f8:fe:b3:a1:21:24:42:1f:6c:5a:
89:54:d1:d1:47:3b:45:d4:e2:5e:6e:a3:9f:d4:fe:
df:6c:02:74:c7:74:02:52:d8:87:6e:58:3e:08:3c:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.95.77.0-103.95.79.255
202.176.15.0/24
Signature Algorithm: sha256WithRSAEncryption
00:b0:13:0b:0e:0a:74:ff:cb:77:c4:0c:fc:a2:10:39:07:6a:
78:fd:59:3d:49:f8:5b:78:f8:89:82:0f:b2:49:b4:6f:a2:1a:
2a:e7:b1:28:93:da:97:b3:47:08:41:33:c8:df:3c:8f:1c:b4:
2b:54:45:d2:aa:f4:f6:b1:bb:28:9a:e9:71:0a:27:ee:29:b9:
9d:d6:9e:4a:e1:9e:23:5a:04:7c:e8:c7:d6:21:4b:bb:d2:30:
a7:5c:a6:ad:c5:f7:87:4d:14:52:23:77:73:0c:b8:3d:11:43:
80:8b:21:8c:d3:8a:a4:e3:c4:63:96:50:b3:f9:fa:51:bf:47:
ca:a9:f1:8f:50:8e:45:0d:c7:0d:87:a2:77:ab:7b:1a:72:ef:
d1:7c:71:a7:e3:dd:ee:80:fc:90:06:1e:28:fc:87:f3:1a:0e:
9c:4a:49:d6:7b:79:d7:4e:2f:12:e5:2c:2b:cf:f5:31:08:10:
c2:f6:de:ee:65:bd:3d:be:6c:d3:5b:4f:18:2e:0b:6e:6e:d1:
31:d5:ec:db:11:a9:49:1e:0c:6d:c3:bf:d3:34:95:1c:a5:86:
c5:16:42:36:03:17:2f:cd:98:9d:4a:59:fb:0b:a4:53:b3:c5:
ad:09:be:e3:e6:67:fd:c0:44:68:1d:e0:8b:51:cc:ba:6b:62:
a2:1f:f9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:13:36 2025 by rpki-client