Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer
File: 9ssujrx6iSv6FcRHs5gkoFjHVa4.cer (raw, json)
Hash identifier: slksq5/fBYVP4KRj9SMbXslzspu8s3ZdOBVgtLvnQFo=
Subject key identifier: F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021D70
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 25 Nov 2024 19:03:20 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 45164
IP: 202.36.163.0/24
IP: 202.49.72.0/22
IP: 2001:df5:b000::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138608 (0x21d70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 25 19:03:20 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91B9EF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:6d:14:52:49:5d:df:ab:5c:af:d6:4a:4e:
8c:21:05:d5:1d:07:af:cf:2f:7d:79:8c:4a:7c:e5:
85:fa:51:7c:ee:f4:83:44:f0:ff:10:4e:47:37:bd:
2c:6c:08:d5:07:81:4d:14:3c:79:b4:61:ae:25:e6:
9b:67:34:47:5d:54:48:cf:d2:3f:77:2b:26:b8:ee:
ab:40:36:d7:7b:6a:68:9e:6e:8c:2e:db:42:00:ea:
84:cc:c5:c7:b1:eb:ff:36:bc:8d:65:79:6a:ac:53:
6c:31:0c:a7:0a:18:5d:db:52:dd:fc:7e:bc:f9:3c:
ef:c8:fa:95:71:f5:04:b4:3e:80:01:cb:eb:0d:a5:
11:b5:41:fd:c5:74:2b:05:e5:51:35:6c:67:11:63:
ae:c7:50:d3:ca:31:78:5a:1e:92:e2:1b:44:c2:8d:
ff:d1:fd:4f:cc:3e:f1:c7:f9:0c:d2:5d:ea:6e:16:
ce:c1:6b:86:08:d3:dd:b3:33:39:e4:e3:00:4f:8f:
9c:77:23:3e:10:0b:b7:2f:1a:dd:bb:9f:f8:cc:64:
eb:d5:34:66:c7:2a:98:f8:0f:ce:85:2f:94:34:cd:
77:ad:cb:03:f7:ca:65:b6:78:b4:d1:c8:4a:9a:c2:
ad:6e:cd:c6:21:16:f6:64:78:67:cf:47:6e:fe:79:
49:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45164
sbgp-ipAddrBlock: critical
IPv4:
202.36.163.0/24
202.49.72.0/22
IPv6:
2001:df5:b000::/48
Signature Algorithm: sha256WithRSAEncryption
06:e0:88:e2:c9:dd:5b:5f:e2:60:dd:63:b4:75:26:7a:25:3c:
75:db:40:89:cf:60:d6:24:56:ca:56:86:a8:20:b4:e5:74:87:
b3:f2:0c:27:dc:33:fb:b9:42:50:dc:97:a5:69:44:7f:9e:31:
de:47:03:b1:b8:64:09:29:8a:5c:78:7e:f6:5f:db:61:01:b0:
30:10:80:d4:5f:f8:04:67:46:a2:6d:18:1f:d7:f0:b3:8b:d2:
55:19:58:4b:79:e9:73:76:48:2f:c3:cd:2d:07:d6:4c:7f:d8:
e3:32:35:44:a2:fd:06:d5:64:9d:be:54:3f:bd:4d:77:1f:d2:
d0:6a:2b:63:86:c6:b8:c7:c2:cd:4e:9a:7c:f6:bb:80:b7:e8:
13:47:ed:08:f2:33:5c:42:b0:cd:21:db:71:7d:a0:a6:4b:9b:
80:4b:46:ae:06:7b:dc:5d:fc:31:86:96:e3:3c:08:e9:52:39:
11:96:21:34:6d:6e:44:12:e8:7b:96:c9:6b:8f:2f:54:53:69:
4d:2f:e8:2b:b1:d9:45:02:ff:fc:99:d9:98:ec:31:75:fe:a8:
fb:01:dc:88:00:c4:ea:f6:b2:94:9d:88:5a:9c:cc:c5:b9:a0:
28:2a:3f:bc:2d:d6:d2:64:46:d5:17:a4:8b:58:76:96:a5:38:
b1:cd:e6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:40:04 2025 by rpki-client