Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
File: 4dFD2djqAiJMHLDJFey4TuKLWqo.cer (raw, json)
Hash identifier: UT0XnCCrTPJF6N4oFF3Ihx1XlTVbXzLIs3KVpNx8gQ0=
Subject key identifier: E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0237E1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 17 Mar 2025 16:07:29 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 38079
AS: 55793
IP: 202.36.64.0/22
IP: 202.49.39.0/24
IP: 202.49.190.0/24
IP: 210.48.160.0/19
IP: 2404:d000::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Apr 2025 14:26:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145377 (0x237e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 17 16:07:29 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9170C53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:91:0b:f6:7e:15:74:40:26:69:29:01:96:
7b:d3:f9:0f:9c:f4:2e:3f:61:3d:96:7a:88:3c:db:
02:e2:65:c6:04:fe:de:37:fc:dc:ac:bc:b3:c5:a0:
0b:54:e0:b0:2f:ae:78:f2:a4:da:d0:f9:3b:e1:ee:
46:97:71:a3:21:64:b6:cc:db:ab:d9:01:9a:a3:c9:
23:ad:2d:20:c1:ac:12:08:54:cb:cc:c4:26:8b:fc:
92:43:18:ab:d0:0b:03:4f:54:3a:26:09:22:6e:23:
6b:0f:a0:1c:ae:f9:05:74:21:67:97:9c:1c:c9:10:
4d:f0:3f:bf:2b:cc:31:f4:34:2a:94:7b:00:80:b5:
8c:d0:c4:f7:19:cc:a7:ce:56:98:2a:a4:1b:2d:f3:
7b:c7:9e:05:34:18:8e:29:75:db:bf:2b:70:69:2b:
28:98:51:a6:8f:34:4b:69:a4:95:44:92:83:61:4c:
b2:98:4f:93:7c:26:24:d7:73:03:4d:14:9d:bb:a1:
eb:af:96:e2:ba:bf:37:f1:f0:c9:d7:b1:78:1b:df:
d9:7d:8f:f2:03:f4:32:55:ec:09:1c:3a:44:09:1b:
91:1c:ed:b7:98:b5:72:4d:c9:37:72:e6:ee:37:7e:
11:0c:a3:74:db:a1:23:14:88:1b:08:f2:ba:5a:c0:
56:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38079
55793
sbgp-ipAddrBlock: critical
IPv4:
202.36.64.0/22
202.49.39.0/24
202.49.190.0/24
210.48.160.0/19
IPv6:
2404:d000::/32
Signature Algorithm: sha256WithRSAEncryption
d1:03:ba:a7:ed:1a:2c:07:a0:11:5d:89:25:15:29:35:99:93:
92:76:93:26:b5:38:12:36:e7:64:b6:4d:4a:83:0a:85:e8:ad:
a7:fa:4a:50:45:27:62:c9:c2:b9:fc:f7:82:fb:75:21:6c:ef:
21:9c:8c:1d:8e:55:f3:ec:5f:9d:ae:c1:87:9a:92:63:1a:0b:
50:6c:1a:7f:2f:04:70:95:c2:4a:be:1b:b0:5f:64:90:1d:39:
ce:16:03:44:73:d8:93:08:bb:34:69:54:c6:ed:a7:f8:13:85:
a2:ab:7a:ab:7e:8c:d8:ee:a0:30:1b:04:09:6b:c0:a5:1d:4c:
cd:45:2d:91:96:70:b2:66:a7:2b:6c:97:f4:08:86:d8:c1:37:
56:98:2f:7a:a0:c7:4e:b6:02:69:38:40:b2:5a:c2:36:61:d3:
c7:8c:ca:4a:e5:7e:ac:02:bc:bc:fe:46:c0:76:7a:5f:68:66:
4c:11:5e:85:fb:9a:98:b2:51:c3:c6:b4:0c:37:cc:21:37:22:
a1:d6:0b:ed:cc:6d:c8:8a:ba:d4:9b:e0:dc:2a:28:51:58:5c:
ae:6c:a0:46:93:3b:d7:d6:ce:85:3e:cf:13:82:b2:34:63:f1:
fd:89:52:db:39:ef:d4:9b:3b:17:35:cf:ef:10:27:38:43:81:
60:c1:e6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:38:07 2025 by rpki-client