Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer
File: 81jWhVW6te9ipNz9TzJANe5gJLY.cer (raw, json)
Hash identifier: 0GroU4Wv61jyISKsAXGR5Fi1V8N13Px1+v4OFzDieQc=
Subject key identifier: F3:58:D6:85:55:BA:B5:EF:62:A4:DC:FD:4F:32:40:35:EE:60:24:B6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023880
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 19 Mar 2025 21:51:30 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 18214
IP: 103.158.32.0/23
IP: 203.153.8.0/21
IP: 2401:f760::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145536 (0x23880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 19 21:51:30 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A919F64F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:2b:34:7a:b0:e6:3e:70:31:32:c7:e0:f9:
16:f8:74:86:a2:c1:23:8e:87:8f:75:33:59:85:22:
07:2d:74:ac:7b:3f:6a:ce:6d:4a:a6:6f:7f:2b:97:
8e:28:bf:44:46:23:58:21:91:8c:85:67:bb:22:94:
fa:e1:c1:fa:e7:56:da:b5:9c:f6:4e:f4:b2:f3:cc:
ea:e4:d3:50:ef:a9:5a:0c:9e:8d:e7:a4:ab:64:f5:
59:0b:f1:44:58:8d:12:9d:8b:a1:21:58:e8:ca:12:
0e:72:52:83:48:1a:c6:e9:21:61:09:a0:71:a5:0f:
e3:33:9c:68:a5:18:f5:71:7f:1a:91:18:a7:31:fd:
06:bc:f3:b6:3e:d4:68:4e:f7:ee:03:10:44:58:8e:
a1:9c:b3:0d:63:4f:31:93:18:72:65:16:ac:bc:d4:
7b:e2:59:35:a0:d7:34:6e:b0:cb:2d:c9:f6:76:56:
55:9b:b4:29:d9:5d:1b:06:4b:6f:8d:02:f6:d5:b8:
ac:56:db:57:a5:7a:a6:67:de:64:37:ff:85:7c:e6:
97:2c:af:06:da:df:8d:24:36:a0:44:3f:1e:60:7d:
7e:be:bb:41:80:8e:c4:c2:1d:ab:63:01:1b:11:dd:
1b:86:37:33:02:0f:5a:87:28:5e:80:f5:58:a5:47:
98:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:58:D6:85:55:BA:B5:EF:62:A4:DC:FD:4F:32:40:35:EE:60:24:B6
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18214
sbgp-ipAddrBlock: critical
IPv4:
103.158.32.0/23
203.153.8.0/21
IPv6:
2401:f760::/32
Signature Algorithm: sha256WithRSAEncryption
48:40:05:fb:c6:9c:8f:12:25:cc:55:7a:0e:75:f7:3d:00:1b:
f5:8a:93:1c:9e:a7:6b:69:ee:d0:d7:80:53:00:a1:de:1f:9a:
43:6e:2e:81:ea:f5:6b:2e:54:56:c0:4d:da:e8:cf:5a:0d:61:
ec:c4:ba:3c:3a:8e:52:d0:c6:28:6f:3d:26:67:f5:b6:61:72:
53:91:6a:1b:b0:f8:3e:dc:ae:71:ec:80:6c:f2:a5:c2:21:15:
73:21:6f:2a:15:e8:7d:d2:5d:92:f8:fd:d3:6f:36:77:cf:0d:
df:fc:ce:9c:d2:c6:d5:b9:73:8e:ac:f0:19:e1:3e:83:40:2e:
64:51:5a:66:5e:fd:73:35:b4:a7:15:fc:48:1b:1b:83:4f:8f:
df:ea:d9:2c:de:b7:b7:e2:0e:67:07:4d:d6:7e:dd:5b:6d:10:
f7:9e:1a:a6:4f:7b:c7:13:34:f7:72:37:ab:96:b9:ca:a0:b0:
55:af:00:ae:0d:64:46:c6:24:10:5f:6f:6b:33:4b:a9:8f:6d:
ac:07:b8:9e:f2:4e:52:d2:30:2c:aa:f7:5c:c0:97:a9:1f:2c:
25:79:a0:d9:2f:2f:0f:65:f0:19:ad:26:23:f7:39:1b:cb:a5:
b6:d6:bd:61:48:63:f3:fe:82:c2:4f:d6:b1:b6:33:0d:d9:02:
9b:fe:95:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:16:39 2025 by rpki-client