Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer
File: 8Os9EfDsrmhzaV1az7e0rcVfNFg.cer (raw, json)
Hash identifier: PKsPo9W+x1fTFkatBPpQd1EA3zgSPPdxpixA0rwJKWE=
Subject key identifier: F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02240C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 22 Dec 2024 14:15:43 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 132427
IP: 103.81.172.0/22
IP: 203.194.116.0/22
IP: 2400:7b40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140300 (0x2240c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 22 14:15:43 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91499BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:a7:2d:19:66:36:f6:64:6b:53:78:23:b2:
36:5f:80:17:2f:bf:2a:75:c2:1c:6b:97:37:b9:18:
f4:97:c7:f7:94:72:a7:2d:5f:d6:5a:36:eb:64:14:
4e:90:be:d4:4d:ce:06:cb:2f:74:3b:a4:3f:76:0d:
a5:2b:d0:5f:bf:7b:a4:52:65:8f:aa:a1:67:7b:1d:
c2:95:dd:b9:df:e3:8e:1d:cd:c9:e0:a6:3d:87:14:
85:15:61:fb:7a:db:07:4e:be:5e:15:fc:1c:bd:21:
a9:a9:e2:89:95:5d:25:b5:b5:1e:e3:cf:32:5a:b8:
b3:9e:f8:37:e4:72:67:92:e9:b8:f0:28:8d:2d:b8:
b6:e5:08:27:4d:4e:92:2b:82:41:c9:2e:ac:9f:6a:
ba:01:44:23:35:e6:08:7d:49:43:be:91:84:a5:b7:
fc:48:41:d0:e1:01:a7:a1:38:e9:13:fd:89:0f:ee:
3f:fc:11:a9:24:07:25:0f:a7:ec:df:dc:27:27:93:
7d:47:a6:93:71:4b:d1:40:6c:f1:df:96:c8:c5:b8:
01:ed:ab:8c:0d:af:d9:81:f0:bf:49:18:24:0e:bc:
f0:d8:bf:93:3c:17:49:7e:d0:50:71:ff:7c:82:fe:
2e:c1:19:f0:c5:f6:85:01:0d:97:b5:02:cb:78:d9:
71:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132427
sbgp-ipAddrBlock: critical
IPv4:
103.81.172.0/22
203.194.116.0/22
IPv6:
2400:7b40::/32
Signature Algorithm: sha256WithRSAEncryption
30:22:83:7f:9d:46:b8:5a:02:b1:ab:5f:34:d7:c8:3a:84:1b:
a0:81:b8:e6:d1:0e:da:69:f7:a6:14:65:b4:ee:09:d9:56:24:
ae:68:c7:f2:c1:4e:5e:fb:b0:79:d7:8a:64:ac:08:bf:e1:45:
c3:e4:0d:92:ee:1d:46:6f:58:47:a2:2b:98:29:2f:65:74:58:
f7:49:3a:cb:c9:b0:ac:f0:aa:e4:eb:05:c2:7a:ad:a3:fd:3d:
36:ad:c3:4b:66:84:0f:3a:27:5e:69:a3:84:4e:58:2c:26:7c:
fa:24:59:75:c2:82:d0:2b:f4:01:b1:73:c3:99:d7:8e:6f:ec:
b7:67:76:a7:62:03:33:eb:cd:a4:c2:fb:9d:c4:1d:75:89:03:
11:a5:a3:7d:12:7d:af:32:94:1a:42:8e:d2:c8:67:46:27:be:
a1:28:41:05:11:e9:9f:13:dc:dc:e2:f1:43:69:be:46:d0:2c:
f6:f5:8a:3b:20:0d:0e:36:4f:bb:4a:00:62:5d:d1:a4:8f:08:
9f:11:85:89:c1:c7:64:c9:ea:48:48:1f:b1:b4:e5:17:6a:e4:
ba:82:af:fa:72:25:f9:52:f6:10:10:b7:05:80:af:8c:7d:31:
54:41:91:68:fa:c2:76:00:5e:7a:21:7a:c6:68:07:18:36:fa:
78:1f:d7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:12:41 2025 by rpki-client