Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer
File: A3uPBfSQLZ2otCTDk0CGXz2smyY.cer (raw, json)
Hash identifier: tmMoF7M1J+Ug9MhxHKKpgd4r2MWbiienIgZ+BbB688o=
Subject key identifier: 03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023357
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 26 Feb 2025 14:46:43 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 55427
AS: 140604
IP: 43.245.92.0/22
IP: 103.232.228.0/22
IP: 182.50.64.0/22
IP: 2402:a300::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144215 (0x23357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 26 14:46:43 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A9167D07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:92:5b:08:41:aa:b2:c1:e5:15:b9:f2:e8:
c2:70:33:a8:d2:97:aa:9c:66:b2:85:51:5b:8f:54:
16:31:29:a4:72:51:db:40:e6:ef:e2:1d:e9:89:c6:
f3:54:8e:14:08:52:2b:f1:5d:26:73:58:08:db:e3:
9b:1b:f1:d3:fa:83:84:e3:f0:c1:a0:81:f2:53:23:
7e:95:61:98:57:87:de:c2:ad:f6:b8:3f:67:1f:fc:
7a:df:5d:c7:17:79:c5:32:8b:10:72:43:38:56:9a:
cf:5f:3b:58:4d:36:58:86:4a:96:0f:dd:d5:31:55:
94:91:9b:40:8a:9e:8f:b2:73:39:e5:f1:a5:63:66:
9c:46:9b:aa:b3:0f:73:e8:3e:94:02:01:e5:9b:ee:
8f:b4:ba:5f:7b:ae:fd:63:58:4f:38:fa:ad:eb:5f:
28:c9:24:30:40:ed:85:f3:69:64:fe:1b:1d:1a:22:
39:36:ad:e5:94:01:73:77:ab:0b:a1:c5:05:c9:80:
18:9b:8b:e4:9d:33:f5:9f:ff:fc:e8:3e:16:b7:2c:
84:f9:31:45:9c:b2:50:a7:8b:7a:34:76:0d:40:58:
f9:ca:b0:a6:54:83:6c:55:43:e9:20:86:82:36:0a:
11:b2:a0:e4:68:46:cd:33:a7:3c:f3:62:ff:1a:03:
57:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55427
140604
sbgp-ipAddrBlock: critical
IPv4:
43.245.92.0/22
103.232.228.0/22
182.50.64.0/22
IPv6:
2402:a300::/32
Signature Algorithm: sha256WithRSAEncryption
a6:92:7b:68:e1:7d:bb:ea:e9:2f:3f:b3:3e:fa:bc:1c:cb:ed:
2a:cd:3b:ad:28:c7:11:1a:03:e0:79:58:9c:b4:65:f0:e9:84:
b4:01:e4:29:e9:73:1f:8f:1a:06:fc:c2:95:a8:6d:88:1c:05:
ef:6e:c0:d4:54:b7:61:ec:1e:80:ff:15:1a:d8:1d:a1:9c:77:
7c:93:4e:2a:f5:60:3b:c1:c9:89:49:ce:82:82:66:77:87:e4:
25:bd:71:f6:6b:5e:8d:f6:7c:e2:bf:cf:a5:cb:78:55:f9:69:
54:e5:d6:9d:90:e7:21:4e:c7:e1:a1:44:89:d4:f6:0c:dd:de:
2d:d7:78:65:b1:5d:d9:c4:01:45:53:18:89:73:8a:ed:b4:aa:
ee:40:10:78:17:ce:8c:ca:8b:74:a7:01:18:56:89:6d:61:f7:
79:1e:f2:f0:6d:8c:72:1e:77:ee:fd:2e:e8:46:1f:c0:c2:25:
04:c4:2e:10:95:17:6d:90:bb:ea:9f:72:c2:1c:e8:83:9e:f2:
01:25:d7:7f:f4:d8:2d:d1:1b:49:d1:c1:4a:17:71:1f:42:12:
89:d8:b9:6a:69:8e:be:63:43:94:9f:e0:6a:b6:07:d5:81:a8:
bb:39:ee:b4:52:50:cc:d9:ab:08:fe:4b:a4:8d:7f:66:0c:6c:
53:7d:b4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:42:00 2025 by rpki-client