Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
File: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer (raw, json)
Hash identifier: 7BF8lVWeQrQ+FP8s+HkdTbLsG/fVYkJTZ9RmZsL80Qo=
Subject key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021F43
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 01 Dec 2024 12:53:56 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 135017
IP: 45.116.164.0/22
IP: 59.153.148.0/22
IP: 61.4.112.0/20
IP: 103.198.192.0/22
IP: 103.229.64.0/22
IP: 103.229.224.0/22
IP: 103.230.144.0/22
IP: 103.232.136.0/22
IP: 114.29.252.0/22
IP: 118.107.224.0/21
IP: 118.107.244.0 -- 118.107.255.255
IP: 185.189.160.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139075 (0x21f43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 1 12:53:56 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A9123072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:f0:37:08:98:04:09:6a:fb:d3:60:18:22:
09:81:3c:92:4a:b7:d4:9f:01:79:25:09:3c:66:d5:
f4:29:f0:9e:d5:a2:d7:da:7c:27:00:b5:6f:b4:ea:
38:24:c9:16:4f:43:fa:aa:94:05:27:2e:6f:a9:8f:
e5:d0:7e:bf:86:d6:3e:fa:4a:81:a1:0c:3f:5f:b8:
5d:e4:a7:75:69:e1:92:c9:e1:a5:d8:a6:7a:2b:20:
26:45:e3:f6:a6:76:8f:09:1f:47:0c:bf:ad:2b:bc:
39:3a:98:1c:50:1d:e8:e6:7e:a5:10:d5:f4:0e:1c:
58:aa:00:92:6c:5e:2e:85:3b:e5:25:12:62:2a:eb:
48:51:23:3c:10:a3:e2:47:2a:4d:d4:33:7b:70:66:
ab:dc:f7:a1:2c:48:ca:81:4e:53:ee:77:65:94:89:
9c:74:50:1f:1e:35:7f:cb:23:3f:ef:6d:ed:cd:3d:
8b:83:ce:07:eb:55:66:ff:8e:c3:f3:30:5d:49:70:
9c:40:b3:42:2a:a8:89:e0:f7:97:07:94:6b:bb:bf:
e3:85:81:eb:5b:90:d6:3c:53:38:bb:30:d0:73:f9:
8e:9d:85:77:39:77:96:da:1e:43:71:95:77:46:50:
d3:60:37:d1:12:75:41:9f:1c:e1:c7:07:1d:6d:73:
47:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135017
sbgp-ipAddrBlock: critical
IPv4:
45.116.164.0/22
59.153.148.0/22
61.4.112.0/20
103.198.192.0/22
103.229.64.0/22
103.229.224.0/22
103.230.144.0/22
103.232.136.0/22
114.29.252.0/22
118.107.224.0/21
118.107.244.0-118.107.255.255
185.189.160.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:98:0b:2f:bb:ab:1f:f4:fe:82:c0:9e:91:ac:d4:44:20:71:
7e:67:35:c6:df:3b:7a:f0:5f:dc:8d:08:6b:cb:68:d5:1b:68:
d9:94:98:4a:df:5d:ae:91:8d:06:ea:41:4c:d0:86:e4:0e:aa:
f8:2f:52:4a:80:1a:5d:f2:c0:44:6e:9a:fb:0f:3f:8c:6a:b6:
5e:6a:c9:76:b0:c5:9b:d9:38:e6:01:ec:43:56:29:5d:59:9d:
ec:ac:a4:bd:c9:bf:fb:35:60:ad:5d:24:e9:95:39:f9:c6:8e:
c4:51:62:62:2b:7b:ae:06:9f:33:cf:03:8b:41:74:73:68:09:
84:91:c0:81:f3:31:cc:62:be:41:67:62:2a:67:d9:59:00:8f:
82:b9:d8:55:4c:95:bd:cd:35:76:93:f9:30:60:a5:cd:15:2b:
fb:dd:de:ad:22:22:50:89:94:06:4d:09:fb:43:6e:6c:7c:e6:
00:a6:7f:95:8f:e8:2d:8e:bd:29:4d:9e:bc:65:3b:c4:4b:5e:
70:9f:57:95:c2:8b:e6:da:a4:5b:bb:fa:47:68:6a:a0:18:de:
33:53:5a:7e:8d:6c:bb:b1:a3:d5:4e:7a:57:a4:c2:1d:46:71:
58:36:60:a4:4d:dd:ec:c1:8b:bc:aa:fe:ff:71:9c:e2:a5:fb:
a8:dd:41:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:13:27 2025 by rpki-client