Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer
File: 38I-PZBdDoNoEhlZbQgimmlPrxM.cer (raw, json)
Hash identifier: BMSXGcEnhoBm0SfaLDwzpTm8ZKF9PDrNRyEm8h4LQWY=
Subject key identifier: DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023888
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 19 Mar 2025 22:49:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 132459
AS: 142128 -- 142129
IP: 103.137.220.0/22
IP: 2404:b940::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145544 (0x23888)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 19 22:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91E3D04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:24:3e:62:82:25:f3:ca:1c:3b:7b:24:97:
29:ab:d5:32:49:25:5b:b8:54:73:ee:22:d4:1f:ef:
c1:42:2b:9e:a7:eb:13:84:81:d2:3d:8f:39:ca:95:
bd:55:99:40:f7:71:cc:db:d2:54:aa:40:af:99:6a:
ef:58:63:0f:47:5f:b1:4b:77:0a:bd:1c:f5:44:97:
65:84:7e:92:2a:0e:ef:f8:5d:3b:e7:97:b2:8c:0f:
db:76:de:79:25:5a:db:b7:f8:2f:b1:20:67:17:64:
7a:62:4d:7b:67:e4:a8:29:69:c7:ee:c9:cd:23:11:
c6:bb:a5:d0:c7:bc:18:9c:2a:2e:73:9f:b4:f6:2f:
5e:7b:c5:79:13:2a:8f:35:f8:6a:25:df:d7:a2:ec:
dd:f3:50:27:c2:e6:f3:04:54:09:bf:9d:3c:92:80:
ea:3a:03:8c:9f:81:86:b9:51:b2:03:94:1a:d2:07:
6f:af:45:bd:c5:a4:ff:00:fb:81:f4:12:2d:d3:84:
91:84:80:f0:2f:b9:46:e2:96:de:03:ab:f4:9a:ac:
04:d7:bb:83:3f:f9:8e:6d:43:e8:34:9d:8b:7f:d7:
0a:54:bb:90:cb:b7:b0:6e:47:81:63:09:26:1e:30:
d6:2c:57:82:86:fa:76:cb:e8:ea:1b:79:9f:bd:e9:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132459
142128-142129
sbgp-ipAddrBlock: critical
IPv4:
103.137.220.0/22
IPv6:
2404:b940::/32
Signature Algorithm: sha256WithRSAEncryption
c3:47:1d:d2:13:6b:7b:60:fd:bf:d4:b4:18:76:7b:07:11:3f:
83:a6:26:42:77:ee:60:87:40:40:d3:72:f1:a2:92:e4:9d:95:
7f:4e:0b:b8:23:52:f2:12:c8:6d:d7:b9:08:af:38:2d:62:57:
1b:7c:29:4f:e6:1d:99:0a:bf:f7:51:6d:43:1e:fc:bd:cf:4c:
23:37:64:15:f8:4e:3c:76:c8:56:f0:1b:01:45:13:8c:ad:7c:
1a:ec:19:10:cd:f7:0e:e6:b2:41:e9:ef:23:d2:39:be:95:dc:
1d:b5:64:f5:38:9b:ce:93:46:5f:6c:af:dd:93:51:bd:da:a6:
9f:f2:f1:5d:71:8d:b2:e6:2a:4a:26:04:c2:ab:8e:ab:27:6a:
2e:8f:ea:33:b1:c8:24:2b:0d:d3:df:d4:7c:8f:8d:4d:84:37:
7b:a8:a7:42:48:2b:c5:6d:db:b4:07:00:8e:85:f7:34:51:dd:
fd:2c:d7:45:fd:3b:a6:37:a4:cd:11:da:99:c0:6d:9f:09:dc:
57:be:bd:77:00:e1:1d:36:87:6a:b3:11:97:b0:a7:62:50:82:
e4:18:d9:76:35:4e:ef:b7:56:dd:6b:2a:14:4e:2e:6f:41:6c:
29:69:d0:53:49:0f:6d:fe:bb:31:5e:3c:04:6c:6d:04:cb:c4:
c5:a8:a7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:07:15 2025 by rpki-client