Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer
File: 3aSfQfYYpV-cp8_FW66nthbZV2I.cer (raw, json)
Hash identifier: /pjZSKyL5u0+QzOh1oP0UhYGWENJL545j4jbR3BTFs0=
Subject key identifier: DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02301D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 10 Feb 2025 05:43:47 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 132894
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143389 (0x2301d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 10 05:43:47 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91A7273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f4:fc:7b:da:bc:a8:1d:7e:9f:46:0a:d6:f9:
47:cb:23:10:7a:6f:8c:1a:ea:94:29:a0:8d:6e:c7:
e3:27:08:c7:57:2e:cb:c6:3c:e5:39:fd:a2:b5:b4:
13:ed:25:a1:86:a3:4f:40:d3:59:0d:aa:37:81:15:
54:8f:df:02:40:54:f9:12:5c:a6:3e:60:f5:d2:90:
1b:5b:70:5d:ad:25:f8:42:6b:77:04:85:24:ce:a5:
fd:6b:2a:a6:ca:01:cc:2a:ed:58:03:d8:23:3c:de:
e5:fc:b9:61:c3:f2:48:a6:50:56:af:da:85:14:dc:
4f:86:9b:ec:4c:91:bb:e0:3d:a0:01:02:b1:f0:bb:
83:04:aa:79:e3:4c:09:6f:5d:06:1b:e2:ec:62:b2:
bf:ba:12:8d:ce:53:0e:48:70:ea:fc:6e:8a:66:80:
cf:79:5a:d9:6d:38:03:61:fc:df:85:77:d0:ae:94:
56:81:12:04:ca:79:89:e4:f9:d9:5c:ec:d7:3e:4c:
ee:95:aa:5d:bf:67:33:a2:ea:ba:43:18:30:c3:01:
e8:07:83:df:a4:08:80:99:99:ed:a2:c3:fa:75:16:
d7:a0:7a:bb:05:31:0a:85:71:be:35:4e:e8:98:5f:
b8:30:89:6e:59:21:8a:57:69:d1:ee:c5:d1:71:39:
1f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132894
Signature Algorithm: sha256WithRSAEncryption
3d:90:c4:db:eb:8b:57:89:2a:8c:af:6d:bd:69:06:49:2f:f1:
d9:cd:ac:50:49:66:3c:32:f3:8b:18:01:19:15:8f:6c:c0:b4:
67:56:35:e9:92:b0:32:35:f1:42:6f:cc:f9:bc:aa:58:e4:b5:
18:29:79:6f:70:e0:31:ca:ea:2f:68:51:31:56:7e:61:3d:63:
a1:28:9c:a3:72:39:96:9b:1c:28:f3:00:f6:93:6b:97:26:5d:
7b:d7:79:33:ec:ca:30:bb:e2:0e:e5:17:ac:96:40:e2:6c:3f:
7c:98:9a:77:83:d4:e5:9e:aa:91:7e:f5:e0:9c:32:9c:9e:ba:
0f:e6:31:84:6b:19:be:86:f6:e5:54:15:ca:f2:90:e1:56:38:
2b:d0:8e:2a:78:3e:83:c7:3c:8c:e8:b0:16:59:56:0b:0e:0f:
df:0e:a4:6b:48:73:b3:e9:19:f2:96:b0:d0:d0:5a:74:a9:b7:
7b:41:fc:07:f3:1d:23:6d:32:f8:59:63:e1:37:29:c3:41:cc:
e7:85:55:a1:71:73:66:01:4f:82:7d:fc:c7:32:e7:fe:f9:f4:
cb:66:a6:b8:4e:44:95:b5:ab:c1:1d:16:30:d8:0d:2a:31:9e:
27:2d:22:0d:fd:73:31:19:b5:43:28:e8:f2:33:84:b1:22:cf:
2c:03:f4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:30:13 2025 by rpki-client