Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer
File: 5P3k1jhc-jqHPsReepFHztMJvAI.cer (raw, json)
Hash identifier: bPuG0TefQ8r0bz6LeKNH7a4vS3+cOoF1l6EWbeIC82w=
Subject key identifier: E4:FD:E4:D6:38:5C:FA:3A:87:3E:C4:5E:7A:91:47:CE:D3:09:BC:02
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021E21
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 27 Nov 2024 23:38:27 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 139761
IP: 103.144.184.0/23
IP: 2001:df1:d680::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 21:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138785 (0x21e21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 27 23:38:27 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91EC46B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:76:7c:67:9c:11:c4:7e:cd:1a:8f:2f:29:
3c:0d:c5:9a:d2:22:55:ef:75:46:36:19:ae:5d:47:
f3:41:2e:f1:5a:ac:f7:8c:ce:99:60:25:37:ba:f5:
c8:ac:f6:e8:56:2e:86:42:cc:ba:db:e4:7e:61:2a:
38:eb:4e:6c:6b:89:7f:14:f8:e4:ca:e1:ac:14:68:
a1:a4:1d:4a:83:1a:e3:86:14:ad:74:d6:68:df:a4:
11:61:d8:08:bd:6c:8b:5a:ac:3a:ea:4b:b5:80:4d:
99:03:4e:9b:57:10:9f:97:0e:a4:02:24:3c:a4:82:
cb:56:7a:f3:57:45:bf:1c:51:6f:4e:1b:bd:e9:e6:
b0:15:3e:8a:de:11:04:a9:93:9a:9b:7b:f5:bc:72:
c6:67:90:72:6d:06:31:3b:86:2a:e0:1a:ab:c7:af:
d7:d0:84:8d:4a:c8:2a:52:05:50:9e:79:66:b1:c4:
45:4b:e7:ff:2f:ce:a5:0b:77:a7:6a:1b:57:d5:a5:
7d:38:11:6b:01:79:6e:38:73:07:b7:d3:44:cb:17:
19:b2:28:d6:fa:64:a6:cf:d3:0a:93:81:42:e4:a5:
12:1e:95:e0:30:dd:08:a6:93:0b:b5:55:5a:c1:42:
cc:0b:96:c9:ab:18:4b:6c:4b:cc:97:9c:ad:5f:4e:
a6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FD:E4:D6:38:5C:FA:3A:87:3E:C4:5E:7A:91:47:CE:D3:09:BC:02
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139761
sbgp-ipAddrBlock: critical
IPv4:
103.144.184.0/23
IPv6:
2001:df1:d680::/48
Signature Algorithm: sha256WithRSAEncryption
92:10:f6:1c:5c:78:64:dd:aa:bc:a2:9b:5b:ed:b4:f6:02:35:
44:f4:9d:97:5d:98:56:3f:62:d9:cc:64:ad:8b:21:cb:9c:a3:
a5:c6:0a:56:cd:de:78:1a:09:38:34:c5:f6:d4:fb:1b:70:4b:
dd:96:1b:d2:81:26:d0:10:3e:a4:2e:dd:89:69:28:2a:40:e4:
65:7b:a7:32:9d:3d:8a:32:ae:02:3c:0d:b5:d2:df:13:19:c8:
6c:2c:26:d2:08:c9:f1:5d:b4:05:ef:19:91:6a:91:09:5e:98:
99:e5:24:8f:6f:2e:cb:e0:9e:b5:1a:78:9b:45:ca:a9:74:7d:
7a:f8:46:84:55:43:58:c5:9a:f7:dc:91:59:18:a0:9e:02:81:
a3:bb:65:d8:7f:da:f1:47:92:59:1f:02:25:59:ed:65:f7:db:
ae:e1:d1:89:1a:ec:5d:6a:ef:e5:22:ad:a8:48:f8:3d:89:ff:
d0:f7:8a:a3:f5:64:25:6d:37:7d:6f:d4:43:5d:3f:4c:fe:cd:
d5:59:bc:69:b6:34:61:de:17:6d:aa:50:13:be:d9:00:ef:3c:
9c:df:e7:2e:73:0b:a1:3b:55:6b:e2:e6:bb:1d:3e:fa:d7:5b:
cc:c7:50:7d:41:c7:ad:91:21:5e:68:aa:80:da:2c:d9:e3:2d:
4b:50:50:bd
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAh4hMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTEyNzIzMzgyN1oXDTI2MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRUM0NkIxMTAvBgNVBAUTKEU0RkRFNEQ2Mzg1Q0ZBM0E4NzNFQzQ1
RTdBOTE0N0NFRDMwOUJDMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTcnZ8Z5wRxH7NGo8vKTwNxZrSIlXvdUY2Ga5dR/NBLvFarPeMzplgJTe69cis
9uhWLoZCzLrb5H5hKjjrTmxriX8U+OTK4awUaKGkHUqDGuOGFK101mjfpBFh2Ai9
bItarDrqS7WATZkDTptXEJ+XDqQCJDykgstWevNXRb8cUW9OG73p5rAVPoreEQSp
k5qbe/W8csZnkHJtBjE7hirgGqvHr9fQhI1KyCpSBVCeeWaxxEVL5/8vzqULd6dq
G1fVpX04EWsBeW44cwe300TLFxmyKNb6ZKbP0wqTgULkpRIeleAw3Qimkwu1VVrB
QswLlsmrGEtsS8yXnK1fTqZtAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU5P3k1jhc
+jqHPsReepFHztMJvAIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUVDNDZCL0Y2ODVCQzlDN0ZDMjExRUJBNzE0NTQyQUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFQzQ2Qi9GNjg1QkM5QzdGQzIxMUVCQTcxNDU0MkFDNEY5QUUwMi81UDNrMWpo
Yy1qcUhQc1JlZXBGSHp0TUp2QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiHxMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ5C4MA8EAgAC
MAkDBwAgAQ3x1oAwDQYJKoZIhvcNAQELBQADggEBAJIQ9hxceGTdqryim1vttPYC
NUT0nZddmFY/YtnMZK2LIcuco6XGClbN3ngaCTg0xfbU+xtwS92WG9KBJtAQPqQu
3YlpKCpA5GV7pzKdPYoyrgI8DbXS3xMZyGwsJtIIyfFdtAXvGZFqkQlemJnlJI9v
LsvgnrUaeJtFyql0fXr4RoRVQ1jFmvfckVkYoJ4CgaO7Zdh/2vFHklkfAiVZ7WX3
267h0Yka7F1q7+UirahI+D2J/9D3iqP1ZCVtN31v1ENdP0z+zdVZvGm2NGHeF22q
UBO+2QDvPJzf5y5zC6E7VWvi5rsdPvrXW8zHUH1Bx62RIV5oqoDaLNnjLUtQUL0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:16:50 2025 by rpki-client