Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer
File: 4W5PZeLjl-n84FeFomXGGXyCIMk.cer (raw, json)
Hash identifier: ZpQhRpIa9vNIkpCdPFMUKCJ9+rG7Pc0lKiJJHUf54DU=
Subject key identifier: E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022175
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 09 Dec 2024 03:51:33 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 45666
IP: 202.89.100.0/22
IP: 203.55.53.0/24
IP: 2407:8600::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139637 (0x22175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 9 03:51:33 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A916DED9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d0:d0:e5:cf:4e:4f:ba:85:9c:70:2a:be:c9:
e7:22:3b:59:0c:5d:38:18:62:18:ca:e9:70:3a:02:
81:ce:3b:45:69:53:a6:c4:49:2b:6e:9c:d1:c3:0e:
31:5d:dc:cb:70:d0:04:11:42:ce:79:59:6d:98:ce:
cf:c2:53:92:c8:5e:6e:e7:bb:80:48:a0:44:28:b4:
9b:41:2b:4f:f7:ac:5d:1e:44:b0:f1:95:c5:c1:bf:
d1:a7:5b:c2:81:38:08:6e:4d:a0:72:5c:38:2e:bb:
96:60:aa:ac:73:9e:8b:e0:1f:26:8e:2f:67:98:7b:
98:02:d8:c1:28:1e:5b:67:78:06:2d:2f:20:8c:a4:
e9:b1:1d:6f:f2:bd:21:14:44:bf:db:03:73:c2:8b:
60:28:bf:a1:e4:01:5b:0d:02:38:a6:28:15:a4:38:
03:7c:b2:ce:a9:33:64:d9:1b:61:bb:1b:26:17:4f:
29:e3:7a:c5:04:8c:6e:a8:4b:cb:8e:a2:c7:74:52:
ce:eb:eb:cc:c1:3c:d0:69:e6:8c:90:f8:92:cf:df:
d4:20:9b:d7:ba:b4:ca:b3:5e:fb:9d:ff:1e:fb:a4:
12:53:f0:ab:85:1b:a6:c3:7d:80:8e:fc:22:d6:1b:
9e:b8:d1:cb:56:ed:ce:a5:74:b1:5d:fe:b9:bb:8a:
65:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45666
sbgp-ipAddrBlock: critical
IPv4:
202.89.100.0/22
203.55.53.0/24
IPv6:
2407:8600::/32
Signature Algorithm: sha256WithRSAEncryption
24:5e:2b:94:39:48:4f:ab:85:14:c1:53:5c:65:01:14:18:e7:
ab:d0:3f:fb:56:ea:17:da:51:85:ac:5b:21:83:cb:23:52:26:
10:6f:ce:2a:c7:3f:de:08:f7:71:39:e0:00:22:a8:84:0a:d4:
20:fc:b3:2f:88:25:6f:64:21:df:bc:38:f3:da:60:71:01:53:
7f:a8:e2:32:76:68:78:34:53:4f:26:a5:64:7d:68:b5:53:17:
29:96:c9:7c:0e:14:1e:c0:29:ff:51:33:bd:a5:8b:62:23:36:
d8:19:ae:e7:ae:fa:f6:ec:53:12:da:99:b5:ec:3b:47:75:51:
d1:29:1c:50:7a:8f:f5:a4:da:cc:9f:13:d7:83:59:5d:ae:b5:
26:a1:90:99:66:c4:7f:56:7d:b7:bb:12:ca:58:d2:5b:3c:e8:
fc:46:63:fe:98:5d:73:a0:18:93:42:8a:77:9c:52:8c:bb:f1:
1b:67:4a:b2:10:c6:ea:57:33:07:76:f5:80:41:63:48:15:8e:
5c:44:e7:b2:ac:1d:41:ea:00:4c:66:ae:b6:08:67:a3:2e:6a:
9e:39:fc:98:9b:f4:89:f4:83:39:87:97:00:50:b5:f0:3a:f9:
ca:15:9d:ec:39:c9:36:25:d0:ba:37:14:94:a5:6c:9a:73:39:
cd:6e:2b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:57:22 2025 by rpki-client