Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
File: 6XepImIg6MeKHRs74E1gzcyKIYg.cer (raw, json)
Hash identifier: zzhbPCeV9Of79PO6ZP95FkT19smDoDoJDUGOOIMu8+0=
Subject key identifier: E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023065
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 11 Feb 2025 05:32:14 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 132546
IP: 103.245.120.0/23
IP: 2001:df0:457::/48
IP: 2401:3d20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 20:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143461 (0x23065)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 11 05:32:14 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91FC5BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:16:df:81:40:b4:ee:ed:56:fa:ab:84:d7:aa:
7e:ed:46:b6:50:5f:b2:94:6b:9b:2d:3a:99:2a:69:
ab:60:fd:71:e1:89:a8:10:c5:26:d0:60:06:c5:a9:
19:3d:b5:39:73:9d:b8:f6:dc:59:2d:db:b2:f1:2c:
41:65:20:0a:8a:91:f8:d7:22:a1:6b:44:dc:01:e7:
3b:cc:8e:ab:e0:82:76:42:38:a3:5d:92:6a:66:88:
b0:a1:eb:b4:5f:15:e9:9e:96:55:00:12:5b:a8:7a:
b4:0d:ad:89:7c:88:50:20:16:51:39:d3:89:93:44:
28:fb:34:79:59:46:fc:5d:c1:7b:34:65:8b:f4:8d:
a9:26:3b:db:8b:d7:fe:e2:08:1f:f9:c6:22:ee:2f:
91:c4:bb:6f:cc:6d:5f:02:d5:88:ac:43:be:4d:4d:
57:7e:46:5e:a1:b5:c5:02:0b:ee:eb:e5:1b:1d:2a:
36:db:be:0f:6a:7f:bf:f1:eb:81:c7:47:25:76:b8:
95:d8:26:0e:af:dc:ad:15:2d:e6:72:50:d2:c9:e1:
20:12:04:6d:f5:c9:ce:f9:a9:cf:ec:85:ea:4e:1b:
95:cc:83:62:eb:fc:92:7a:38:6f:5a:45:94:39:bf:
6e:52:6a:bc:52:7b:6c:da:97:10:1d:1b:b1:a1:55:
35:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132546
sbgp-ipAddrBlock: critical
IPv4:
103.245.120.0/23
IPv6:
2001:df0:457::/48
2401:3d20::/32
Signature Algorithm: sha256WithRSAEncryption
1a:b0:9c:48:d7:30:f4:c3:51:15:26:f3:60:09:07:55:6f:0c:
3a:ed:57:06:39:5e:7b:18:a2:c0:73:6a:1f:d1:bb:36:ff:01:
c3:f2:35:cb:c5:bc:23:d6:be:42:80:69:12:d4:53:71:b4:0e:
2b:48:a8:a3:9f:be:44:ed:5f:cc:1f:5d:2d:bb:55:e3:64:b1:
a8:ab:b5:e5:2d:2a:63:6e:1a:e7:cc:9d:cc:d5:0a:d3:e4:8f:
ce:d7:17:50:70:6b:d4:3b:60:e5:29:39:79:9e:0f:19:21:da:
66:80:d2:54:37:1f:7b:39:07:21:5b:7f:94:ff:0b:fd:21:8c:
7f:49:c1:a9:51:0f:c9:bd:d9:38:09:cd:75:8f:9c:af:0f:27:
ea:d6:2d:6e:64:e4:69:e1:7d:7b:41:b0:49:75:04:aa:f1:9d:
d3:7e:3d:12:36:75:be:ba:02:db:b5:06:78:61:d3:3a:8b:c7:
9f:e1:27:d5:39:ab:bc:de:b3:cf:d1:6a:8b:86:e7:37:a0:b1:
44:ab:91:39:f6:2f:ec:b5:1d:0f:5f:f7:b8:6e:1a:db:e9:f6:
7c:03:fd:4c:00:0a:2e:a4:52:92:eb:83:c5:44:60:42:27:de:
40:3f:a0:94:a4:16:70:56:1a:2b:98:f0:eb:69:49:22:44:05:
dd:28:8e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:06:37 2025 by rpki-client