Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
File: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer (raw, json)
Hash identifier: yWM8XZsvfn2LAfsaGrNL+MzliMeh1hirZg3jZi3ir4E=
Subject key identifier: E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023413
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 28 Feb 2025 21:07:40 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 103.84.148.0/22
IP: 139.5.116.0/22
IP: 2400:a0c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144403 (0x23413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 28 21:07:40 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91DE5E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:91:31:2e:7d:da:6b:8e:fc:a8:38:25:42:
b7:b6:af:37:87:be:0e:2b:7b:51:42:4f:6a:8c:de:
38:3e:84:2d:f6:c5:9e:c8:54:98:d6:da:63:eb:2b:
33:1b:2a:c4:ad:50:6f:a2:30:b9:09:ed:46:0f:6c:
df:6e:85:bb:35:9f:8e:f4:47:08:3f:82:ba:f8:a3:
3e:a5:39:dd:33:b6:64:53:8f:ed:e8:67:cd:aa:28:
68:6e:29:13:f1:f0:bc:5b:b4:12:4a:a9:3d:a2:db:
e2:d6:90:fb:4d:41:52:13:6e:7d:57:4c:8b:0c:e4:
1b:2b:0b:dc:02:f0:6f:85:3f:bf:30:58:4e:d4:a3:
76:74:df:2e:89:87:ca:cb:63:1b:ce:60:94:2b:c1:
5c:c7:47:52:9a:99:84:9e:af:43:fd:d7:57:fe:de:
e9:06:de:0c:33:84:69:9c:39:e7:85:7b:12:3a:26:
18:4c:d0:b6:69:0e:34:1d:9f:3b:ca:45:42:f7:fc:
c0:df:3a:cd:88:ab:b3:e0:d8:e8:43:ab:92:95:0f:
e1:b8:c9:2f:65:4e:34:83:b9:3b:f5:f0:c2:33:3e:
ec:df:3e:b3:d0:33:d0:24:5c:d1:80:c9:e7:26:5f:
7c:9a:fa:a1:ff:ed:d0:d3:42:70:27:64:5a:1f:df:
01:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.148.0/22
139.5.116.0/22
IPv6:
2400:a0c0::/32
Signature Algorithm: sha256WithRSAEncryption
d1:31:0e:27:75:2a:20:9e:3b:68:16:62:93:58:11:7b:1b:84:
a2:d7:9f:2b:96:23:61:ee:3a:f8:93:0a:e0:ab:08:30:35:34:
99:92:c1:ea:81:d8:b0:31:5f:6f:16:6a:3c:13:97:9a:9d:7a:
f9:a4:4b:dd:83:e2:70:46:b9:17:60:03:b3:eb:0d:73:f2:a2:
7e:8e:25:d6:be:d3:36:98:3f:f4:b1:f5:7f:00:9f:34:b7:17:
34:bc:3b:7f:ac:20:56:e6:f5:ea:8b:c6:ed:3b:8a:96:16:ec:
ff:51:b1:11:0a:60:66:ae:52:ce:8e:0d:1b:39:01:55:1a:c7:
db:4f:d5:21:d2:d2:13:66:67:00:0c:e5:99:9f:b8:5f:d2:f2:
da:67:75:cf:6d:03:27:b1:c9:89:06:af:96:59:2c:c7:c5:71:
7c:b9:24:c0:11:94:5d:cb:fb:3d:01:db:56:9b:b3:a7:e4:ed:
2a:83:83:9d:50:31:f3:d3:0f:65:bf:44:e8:a2:24:84:df:67:
93:a6:d6:b6:32:88:1a:1f:ed:01:01:44:0e:9a:2f:ff:dc:a0:
e1:6f:25:57:8f:93:f6:f9:af:95:72:03:5f:f0:7c:74:0f:6f:
4f:87:ba:f2:46:ed:5b:49:ed:ac:6a:54:12:ca:22:94:e6:5d:
d9:a1:2e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:13:27 2025 by rpki-client