Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
File: 9FQft3ll3hSln57yM94Z-SBfX5g.cer (raw, json)
Hash identifier: dU5yr6ltdJupOFCC0SGQt2LGyU0lxXtuC6JVcrdgXmU=
Subject key identifier: F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02257A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 30 Dec 2024 13:41:22 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 38230
AS: 134828
AS: 136918
AS: 137490
AS: 137509
AS: 137520
AS: 139308
AS: 141702 -- 141703
AS: 142039
AS: 142289
AS: 142419
AS: 142597 -- 142598
AS: 142632
AS: 142635
AS: 149434 -- 149435
AS: 149845
IP: 103.158.222.0/23
IP: 2001:df5:6880::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140666 (0x2257a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 30 13:41:22 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A9137917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:5c:13:a0:42:44:65:d7:8a:49:9e:41:e1:
53:0d:38:c7:3c:4e:f4:23:4f:5b:31:12:20:c4:52:
11:bc:28:44:80:22:b1:f1:a2:a2:a2:b1:ad:f9:22:
98:8b:92:45:32:5f:41:88:f6:2d:6d:cd:79:29:2c:
46:63:06:20:f6:d8:be:b8:82:85:17:49:54:f0:de:
60:f7:9b:92:fd:a0:6f:e5:64:ca:da:e1:35:17:d3:
2e:08:41:0f:0a:b9:9c:21:49:3e:3d:c5:e3:f4:4f:
88:1f:16:25:83:0e:a7:78:65:09:1d:45:36:c3:f7:
b3:77:f8:44:08:ae:3e:a5:45:cd:1b:9e:a7:0f:8c:
2d:fc:c3:c4:18:ce:c6:f2:6a:5b:e0:57:60:f0:1f:
c8:d5:82:9d:53:91:4f:7b:7d:11:05:e2:73:c5:5c:
f4:78:fb:50:79:a1:f4:86:3a:10:4a:9e:3e:9f:df:
79:d5:52:3d:c6:6d:46:82:89:63:82:d0:d9:b8:27:
d0:38:d1:ab:17:62:44:f3:8f:4b:d9:b0:63:c0:66:
20:85:34:b6:4c:76:7c:05:3b:99:cd:87:22:1c:77:
30:05:53:02:34:15:fa:aa:03:1c:99:ac:1f:e7:77:
95:f5:6c:8a:0d:74:c2:2f:87:55:f9:30:b7:05:c4:
b3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38230
134828
136918
137490
137509
137520
139308
141702-141703
142039
142289
142419
142597-142598
142632
142635
149434-149435
149845
sbgp-ipAddrBlock: critical
IPv4:
103.158.222.0/23
IPv6:
2001:df5:6880::/48
Signature Algorithm: sha256WithRSAEncryption
c0:95:fd:05:f6:2c:d8:ac:e8:10:0d:28:ea:53:c2:e7:c1:61:
33:d8:b9:68:24:4e:79:5f:7f:0f:e3:6d:28:3e:a9:1c:dc:05:
a5:bb:6e:f2:cb:6e:43:f1:b6:51:9f:0e:ab:f5:37:ae:31:7d:
6f:63:02:20:ea:31:32:98:2f:b0:58:99:3d:99:16:09:88:be:
6a:c8:80:58:45:ad:01:fc:d4:09:51:b0:81:ea:dd:d8:03:68:
ea:f6:b3:a3:8f:cc:78:4d:4f:41:a5:50:b6:24:9f:10:ea:98:
54:69:a5:1a:48:95:44:24:57:b3:2d:ea:c1:b7:5f:79:4e:f7:
bd:d6:05:b0:e0:97:53:9a:84:51:fa:bb:1d:a7:b0:87:ee:78:
0a:20:35:ff:ff:40:be:d3:7c:06:15:26:4b:56:96:33:52:27:
44:1b:6e:89:98:ef:18:8b:15:c1:85:98:32:b5:65:21:c4:ce:
29:ff:43:ba:f6:c5:5c:9c:d9:bb:49:c2:41:09:be:ed:90:5f:
d8:f3:d7:da:92:e0:15:68:76:dd:da:9b:1b:d5:91:18:11:dc:
4a:b0:0c:0b:66:c8:b6:db:1f:e3:d3:86:39:2c:bc:09:a3:fd:
7d:56:c2:9f:8a:1c:03:6d:7e:6d:5e:c1:f2:ea:e3:c6:5c:c3:
6e:9e:89:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:01 2025 by rpki-client