Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer
File: 444NefP9KSMew_PjAp05P0MnfLM.cer (raw, json)
Hash identifier: zxYkjlvedXb3EqcDFH6hsuH+2umwbwDjzoBf4A5y6s0=
Subject key identifier: E3:8E:0D:79:F3:FD:29:23:1E:C3:F3:E3:02:9D:39:3F:43:27:7C:B3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 012529
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 20 Aug 2021 12:49:33 +0000
Certificate not after: Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources: AS: 140971
IP: 103.154.14.0/23
IP: 2001:df4:6480::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75049 (0x12529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Aug 20 12:49:33 2021 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=A9128298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:d1:58:e8:eb:11:9c:b3:7b:24:8c:d1:0f:
d2:14:3c:50:68:48:ed:66:15:dd:45:e9:24:61:7b:
13:83:84:a8:c2:74:bb:05:37:98:2e:2b:09:f5:19:
62:68:35:18:00:2d:36:a8:79:0b:30:1c:08:40:ea:
3b:ba:bf:a8:43:d6:7c:e3:89:11:5b:12:7d:f3:ba:
94:92:7f:68:c3:45:fb:6b:6e:ca:f9:8d:0c:22:9b:
fd:42:cc:52:a8:3d:07:86:c1:69:fe:4d:bc:75:3a:
57:b3:5c:99:37:2d:3a:f9:e5:3d:69:cc:c7:66:53:
e7:2f:29:7c:3b:90:73:35:f0:2f:78:40:b8:92:42:
e6:f6:38:19:49:c1:b6:bd:e4:bd:a1:16:7b:e1:4e:
58:12:85:a8:0b:7f:6a:31:23:7a:64:ac:e7:28:54:
ea:51:70:b4:3a:6f:5f:38:cd:61:f9:dd:65:78:cf:
a8:1b:9e:08:cf:2b:d4:d3:2b:fa:83:b5:2b:cf:01:
12:e8:53:df:0e:45:66:a8:41:73:0c:08:f6:3e:04:
62:ac:53:25:f3:33:66:09:85:8f:94:de:24:5a:cc:
85:46:9f:94:51:f0:13:ac:fc:b7:3b:4b:e0:54:f7:
25:f0:51:20:68:2d:6f:5e:6f:2e:e6:27:43:a8:69:
a1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8E:0D:79:F3:FD:29:23:1E:C3:F3:E3:02:9D:39:3F:43:27:7C:B3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140971
sbgp-ipAddrBlock: critical
IPv4:
103.154.14.0/23
IPv6:
2001:df4:6480::/48
Signature Algorithm: sha256WithRSAEncryption
ac:2b:38:69:71:2d:a7:17:2c:6f:fd:54:b3:eb:a7:f7:b9:15:
53:e8:97:66:82:0c:9f:48:db:d7:fe:4a:71:15:f8:d3:51:54:
15:5b:2c:f3:12:98:5e:c8:c8:e2:5d:da:ea:b4:00:7c:6b:27:
55:7e:6e:56:c7:bd:32:d1:f5:00:53:34:16:7f:32:c8:71:81:
3c:3c:af:de:10:f3:62:f7:31:1a:c6:23:cc:e5:4a:ee:82:1d:
db:7e:20:73:a3:49:2e:3b:c8:3f:ff:0d:14:a9:56:93:09:7c:
1b:6e:f6:40:69:14:14:36:8a:6e:1b:d5:ad:05:ab:00:f3:72:
70:40:f8:15:16:cd:8b:14:e8:36:e3:ec:2a:1b:90:f4:f6:79:
7d:1f:87:55:9f:22:70:48:25:2c:b2:e1:db:98:05:cd:5c:8d:
73:22:89:62:5f:fb:d9:8e:0d:5d:c5:31:c5:87:e8:e9:41:9c:
95:8a:cf:6a:37:1f:f1:de:2b:f9:bf:03:7e:53:04:ad:23:93:
5b:7d:52:06:d1:65:08:64:82:ef:71:f6:75:90:3a:2d:0f:c6:
67:e0:8f:2a:8a:89:bc:69:e2:fe:51:e3:c3:06:e3:f3:b6:c3:
45:40:6e:52:7b:26:05:36:c2:16:22:d0:20:e9:0e:4f:83:d2:
64:f4:85:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:42:02 2025 by rpki-client