Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer
File: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer (raw, json)
Hash identifier: bB0PQ9Q7yQ0o4dKHQA6MR7WftOZ9y2lslfL6818E3qc=
Subject key identifier: F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02314A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 14 Feb 2025 13:46:31 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 17979
IP: 103.83.168.0/22
IP: 203.89.112.0/22
IP: 2400:9440::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143690 (0x2314a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 14 13:46:31 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A9135604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:d3:83:1b:aa:f7:74:7f:e1:fb:f9:bb:9b:
58:76:20:6a:9d:b9:b5:20:7e:0e:6d:99:a2:1f:4b:
56:77:67:d1:2f:a5:a5:7f:d4:1d:07:d7:4c:d4:5e:
5e:40:67:b3:eb:cf:db:4e:f8:47:6c:c5:01:95:e8:
93:fc:07:51:af:c2:06:9c:17:b4:fe:8b:e1:7e:dd:
a5:5e:0c:dc:20:af:b6:f6:b6:95:ef:d9:ef:68:9c:
ac:38:cb:90:dd:d4:68:54:94:ce:65:71:6c:53:b0:
1e:72:e5:85:5d:18:eb:f5:d3:98:f3:2b:04:bc:04:
bb:2a:53:f0:5b:b2:c3:d0:35:0a:7d:b4:6b:0c:8a:
2e:6d:53:15:4b:cc:c4:da:6e:59:fd:ec:83:eb:5e:
b4:ae:e0:62:7e:9f:6d:aa:f0:31:8c:bf:d9:29:83:
2e:85:c3:f8:08:c2:63:d1:f8:8d:e9:24:c9:e2:33:
0a:9e:0e:7c:06:02:cb:bf:07:d1:25:63:c1:ac:c8:
33:92:df:85:28:ea:99:f8:1a:85:ee:46:66:70:f8:
46:a8:60:95:5e:ce:21:e4:9d:d8:d7:c6:cc:86:9a:
17:d4:66:2f:3d:a9:53:b1:04:68:9c:15:b3:01:03:
92:c3:2e:0b:fa:77:7c:cf:75:ac:5d:09:fa:8e:4f:
cc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17979
sbgp-ipAddrBlock: critical
IPv4:
103.83.168.0/22
203.89.112.0/22
IPv6:
2400:9440::/32
Signature Algorithm: sha256WithRSAEncryption
44:55:c6:bf:eb:12:71:93:a7:65:09:99:74:88:57:89:73:c1:
a2:f4:cc:dd:02:0b:da:4c:0f:b4:82:ba:73:95:bc:ac:8e:14:
3a:a6:f3:10:eb:22:f0:e1:0d:b0:e3:7f:51:d0:87:96:45:f9:
30:bd:89:ae:8f:9d:b0:48:b0:0d:3e:f3:ca:39:bc:87:5c:d6:
57:aa:c8:41:a1:dc:ca:c2:20:23:59:1f:42:0d:31:62:39:b8:
6f:77:80:31:10:1b:5d:3d:5a:1c:80:09:f2:d7:22:9b:61:99:
6e:4a:1d:7f:ee:f3:d9:7a:35:5a:a3:0a:76:e8:7a:fa:31:2a:
f6:de:95:db:e2:76:95:d1:87:f5:81:b7:06:4c:27:84:58:e8:
df:9d:f5:65:94:7a:2b:52:9b:56:08:1b:23:37:5a:84:4a:ce:
74:3d:6c:1a:83:58:34:07:f2:47:84:6d:af:e2:d4:65:fe:f1:
bb:ce:9a:59:05:1f:63:cf:4e:50:d2:9f:dd:41:2f:1f:0c:a4:
f6:fb:4c:46:56:5b:1b:6f:3a:d5:21:96:f7:0b:ec:b1:b5:23:
95:ff:73:f0:6b:95:f0:39:68:76:aa:62:4c:e1:3f:af:0e:1f:
05:02:e3:2c:ba:20:fb:64:76:82:93:0c:1d:70:e8:dc:b6:60:
ab:f7:7d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:05:27 2025 by rpki-client