Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer
File: 83-esXYeax0_fqbWxvyluZc5FKs.cer (raw, json)
Hash identifier: 1FLP8oM88Duu6HDxG3jRREpw4w9WXpizYmfzvEavvsY=
Subject key identifier: F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022C4A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Jan 2025 19:52:03 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 133585
IP: 103.178.100.0/23
IP: 2400:45e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 21:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142410 (0x22c4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 29 19:52:03 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91B8FA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:18:95:68:7f:fb:4c:0b:ea:a7:25:ca:5e:40:
29:b4:25:5b:18:f5:a4:ca:5d:8e:ef:c3:b5:8b:65:
0d:12:57:23:9b:26:03:a0:75:fa:b5:ad:8c:0d:90:
9e:b1:04:b9:ba:c4:87:13:a4:41:28:94:ea:f9:f2:
10:32:10:f9:08:1a:61:43:fb:c2:5b:e3:8f:63:0d:
6c:0b:f7:57:0b:79:58:08:47:54:16:28:eb:eb:fb:
9d:62:c2:d4:aa:a9:e0:4d:9d:8c:82:2c:a6:83:56:
3f:12:83:b3:61:c3:c0:2d:2a:88:06:db:d0:fb:fb:
6b:aa:ca:31:b6:d1:b6:35:f0:65:27:7e:18:6e:d4:
ea:87:2b:7c:2e:78:5e:eb:8a:e2:fd:2b:d0:06:f2:
00:35:48:a0:3f:38:13:f8:01:5f:9c:81:f1:18:68:
25:df:62:9e:dc:31:54:3e:bf:da:9a:bd:6e:40:2b:
ec:03:04:cc:23:62:50:66:61:dc:35:a6:25:ba:b6:
4f:99:0d:72:e7:06:30:47:d6:8a:1e:95:42:2b:20:
6a:4a:93:fd:f5:7a:98:62:0b:3c:7c:7b:df:93:21:
5c:ce:68:92:ce:6e:66:f4:ef:9a:78:e8:1c:93:a0:
8e:28:b8:4c:bd:d2:57:1c:3e:9d:69:17:3e:9f:d3:
ae:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133585
sbgp-ipAddrBlock: critical
IPv4:
103.178.100.0/23
IPv6:
2400:45e0::/32
Signature Algorithm: sha256WithRSAEncryption
a4:84:ec:23:f4:42:4f:4b:2d:71:99:90:44:ed:29:59:09:3a:
d3:68:6e:0a:c1:05:17:44:bd:8b:ff:ae:83:a6:e6:11:44:61:
1b:b0:78:99:40:02:b7:22:db:50:d2:a4:88:7b:d2:31:4f:a3:
c4:f4:fe:4f:54:15:6c:2f:1c:1d:ac:f3:8b:f7:1d:fc:97:8f:
50:0b:d4:ae:8f:2a:b3:10:6c:2f:65:5e:18:a3:60:3c:85:0c:
1b:81:a6:6d:a0:4b:76:61:c6:25:9e:a8:e6:ca:f2:4a:08:69:
84:84:c8:34:f9:48:04:0d:61:ff:3a:0e:e5:56:cb:29:b5:b8:
63:a6:c8:dc:c0:58:f8:37:8e:4a:47:a5:2c:52:8b:e1:3d:41:
51:58:9a:03:34:6a:3b:81:3e:d2:e9:6c:7e:7b:55:a7:bf:0b:
48:94:ef:d5:c3:6f:b5:d3:8b:93:70:7b:41:26:8a:13:dc:ce:
28:7f:b2:be:60:58:76:d2:05:85:7b:8a:9e:a5:12:ff:3a:1a:
bb:f9:24:7b:36:47:36:8f:ea:60:5a:78:f1:f0:46:d2:3b:40:
0d:b3:58:fe:4b:60:06:19:25:62:f2:0b:1b:73:1c:76:6f:ed:
f7:da:fa:a0:46:0b:f7:2e:6d:a6:ae:a8:e7:77:f4:f6:7e:fc:
3c:6c:2f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:50:26 2025 by rpki-client