Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer
File: 6D_PTG_I1087arQlYG4rx3RtZkA.cer (raw, json)
Hash identifier: QsG3Xuo9z5C1MO5HH1P1O9MmaDg4WYhW/AqpHM1a4Aw=
Subject key identifier: E8:3F:CF:4C:6F:C8:D7:4F:3B:6A:B4:25:60:6E:2B:C7:74:6D:66:40
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023C32
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Apr 2025 12:05:28 +0000
Certificate not after: Fri 01 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 136246
IP: 14.128.12.0/22
IP: 103.84.172.0/22
IP: 2400:a2c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 17:46:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146482 (0x23c32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Apr 2 12:05:28 2025 GMT
Not After : Aug 1 00:00:00 2025 GMT
Subject: CN=A91EC9A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:42:8f:87:8f:0f:b2:42:8c:78:83:1e:08:
73:99:7b:cf:85:e0:c1:33:5e:cd:84:91:a2:92:ec:
c4:2a:91:e6:70:ae:51:39:06:15:55:ff:d4:24:27:
2a:50:cb:a6:69:d1:af:d5:e7:27:75:18:58:e0:93:
91:fa:c2:f4:40:69:06:08:cc:a2:2f:c9:72:22:56:
6a:0a:22:3a:58:57:1e:d8:38:98:66:1d:ac:f1:92:
94:ef:dc:78:cc:44:c9:7c:b2:ed:5d:49:8f:22:0b:
5b:5a:c0:b1:cf:a0:23:7e:fe:ac:c6:a5:d6:19:bf:
c8:ae:26:76:d0:48:97:0c:31:a4:96:3d:e9:93:2f:
07:a2:98:ab:c9:5b:44:47:b0:83:c9:d2:17:d3:e5:
4b:9e:aa:9c:fe:cd:dc:d9:23:94:d3:e2:67:71:01:
4c:4e:f9:e2:d0:6e:52:38:42:29:e9:de:12:7f:14:
59:f2:b4:50:af:a4:26:35:2f:a6:09:7d:f0:0e:16:
bb:50:cc:34:ac:5c:fe:1d:88:d1:04:91:fb:aa:bb:
90:67:a9:dd:8a:1a:1b:c3:93:ff:e7:27:6b:61:48:
43:b8:54:86:67:aa:58:e0:9a:5e:ca:d0:16:d7:03:
4a:90:c2:c8:e6:2b:35:05:12:be:3b:7c:9a:1a:f3:
8b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3F:CF:4C:6F:C8:D7:4F:3B:6A:B4:25:60:6E:2B:C7:74:6D:66:40
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136246
sbgp-ipAddrBlock: critical
IPv4:
14.128.12.0/22
103.84.172.0/22
IPv6:
2400:a2c0::/32
Signature Algorithm: sha256WithRSAEncryption
3a:8a:96:8c:b1:94:b0:bd:7d:1b:ba:93:66:a6:dd:3a:88:51:
d7:7d:97:85:4b:c6:88:2a:20:48:f0:0e:17:0c:1b:66:5b:c6:
eb:5d:5a:bc:cb:30:ce:c7:c4:df:63:54:2a:38:b9:0a:c2:5e:
aa:2c:bf:18:e8:55:c2:b5:b5:73:98:19:44:81:05:30:f3:98:
f3:e5:4e:44:2d:d8:27:fe:e0:88:5d:44:2d:e2:13:11:5c:fc:
86:37:18:2c:68:b7:5b:9f:7f:06:58:51:cd:97:08:30:3e:bd:
47:8c:17:a9:9f:d6:c3:2e:06:e1:b8:fe:f2:f0:98:35:9a:a8:
1b:60:0b:27:cf:68:ad:4c:d8:9e:d7:7c:3d:2a:79:97:6f:20:
2e:a4:c9:65:04:5d:8a:a1:20:6c:ed:66:f7:ab:bf:73:98:b0:
8a:96:1b:28:28:70:8f:2c:18:f7:59:b9:12:e7:f1:8b:c8:91:
af:61:55:9a:d5:d9:ce:2e:7a:b8:a6:4f:09:4c:74:df:9e:5c:
1b:f9:72:90:a3:ee:83:5d:59:3f:d7:8d:e8:6b:7f:09:c3:51:
c7:af:e6:a7:a8:66:31:8d:86:6b:92:67:91:fa:fa:b4:b0:fa:
b8:0d:73:f4:3f:1b:b4:66:d9:89:3a:de:f5:ef:a9:c2:fe:2a:
f3:55:72:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:18 2025 by rpki-client