Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
File: 4YL5k2lSxCadZw2ldS3syGgjTxs.cer (raw, json)
Hash identifier: 2Yc0wndCWiEDa6xprwijCBkBg6IGh5qf/lIuWFxOLaA=
Subject key identifier: E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02319F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 17 Feb 2025 12:50:16 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 135036
IP: 45.250.68.0/22
IP: 103.206.208.0/22
IP: 2404:4480::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143775 (0x2319f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 17 12:50:16 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A9126F2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f1:5b:17:e4:df:81:36:6e:7f:71:12:57:60:
35:a4:2c:80:c9:72:d8:fa:b4:00:36:78:02:ab:f0:
cf:8b:07:cb:fe:8f:c2:8a:43:28:4b:86:20:43:2c:
67:8a:02:db:a5:ad:66:d1:d4:55:d6:48:81:51:5b:
85:08:1f:b8:d4:ea:27:f0:08:77:da:db:56:9e:84:
f6:26:e9:96:93:67:3b:90:a8:b2:fd:60:44:2a:b5:
ac:0c:d2:24:54:51:46:d4:e0:3c:c7:a2:46:16:0d:
d5:33:4a:3c:7f:5e:36:0a:88:7a:69:dc:39:80:ae:
14:74:c1:c5:89:57:58:1f:63:b9:b7:44:9c:a4:c6:
32:7f:4e:5e:50:8b:42:8b:37:3b:f3:30:ed:21:e3:
5f:91:db:9a:8d:63:78:9b:6c:fc:23:dd:13:ce:0d:
32:ce:33:5c:7d:80:81:24:39:ad:6f:e2:b8:56:dc:
23:e5:41:8e:a2:eb:8e:7f:69:f2:d0:be:3d:a9:3d:
17:54:b1:ed:f5:73:6a:17:20:a6:36:ad:8b:3d:37:
c0:b1:78:ba:c8:82:c4:27:b7:c4:cd:c5:af:e5:39:
70:d6:6b:07:e9:64:53:ef:a0:94:ed:ad:11:c4:17:
7b:f2:cf:b1:c9:c7:f2:d1:c7:c4:33:3a:97:a0:82:
2d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135036
sbgp-ipAddrBlock: critical
IPv4:
45.250.68.0/22
103.206.208.0/22
IPv6:
2404:4480::/32
Signature Algorithm: sha256WithRSAEncryption
9b:97:ba:7e:91:e3:71:2d:39:5c:02:77:be:cd:54:9a:58:87:
60:7f:93:ad:d9:0a:33:38:9a:c3:a8:22:e8:b1:97:7f:13:45:
38:84:a0:d2:99:91:cf:e1:b9:87:52:a4:1d:78:92:f9:6f:bf:
3d:78:5e:a2:e3:a7:2c:a9:cb:a3:73:72:de:d4:fe:87:bb:7c:
24:a0:da:32:12:e2:ff:e6:01:58:dd:b9:05:d7:d9:78:24:d3:
b9:9c:17:95:1d:32:d5:c4:18:a3:48:5d:41:4d:57:42:36:ae:
cd:90:cd:f3:94:74:be:82:d5:36:05:88:21:f1:cb:89:01:54:
63:67:9d:8a:8b:f4:95:23:cd:a8:6a:63:a8:40:89:0a:7c:f7:
52:db:e7:8d:f6:eb:fa:d0:e9:09:a7:5b:06:5a:95:c0:c6:43:
6f:c0:14:f5:a6:a5:e7:b6:95:6f:92:df:b7:a1:33:5e:51:57:
9c:3c:95:d2:52:e3:dd:cf:a8:51:76:e7:75:99:5c:3b:07:5f:
a8:0e:b2:71:13:cc:58:5f:57:da:cb:49:42:2d:e7:dc:63:95:
31:57:82:4c:e4:37:42:22:4a:9e:97:03:09:80:3d:db:8b:0f:
e3:52:0d:4a:07:ab:da:c6:98:59:f4:c5:93:4d:df:71:65:66:
26:98:98:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:17:35 2025 by rpki-client