Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWWp3MArwOh2h-4GcFwObJkt6TI.cer
File: AWWp3MArwOh2h-4GcFwObJkt6TI.cer (raw, json)
Hash identifier: LJKiWQXYuQFnnoIiCEI7JUcnF7Pq/0Zp4NILxooaIjU=
Subject key identifier: 01:65:A9:DC:C0:2B:C0:E8:76:87:EE:06:70:5C:0E:6C:99:2D:E9:32
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022F0C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 04 Feb 2025 20:14:13 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 137454
IP: 103.109.96.0/22
IP: 2402:77c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143116 (0x22f0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 4 20:14:13 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91AD544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:c4:ec:cc:7b:25:ab:8f:6e:bc:93:fd:53:
81:42:94:ff:0a:16:1c:65:a5:5f:7e:64:60:a6:8a:
00:bd:b2:b5:f7:65:58:74:d8:22:af:cc:f3:39:53:
94:bd:ae:87:15:f7:90:6b:cf:d2:0f:4f:04:a5:4a:
b8:b2:47:32:20:26:c5:97:3e:bb:d9:3f:21:32:2e:
2a:55:fc:da:90:a1:d3:08:14:91:61:5f:e4:8a:27:
9f:7f:c5:f4:38:75:6f:f7:0f:c9:c4:20:ed:b0:10:
f0:95:17:5b:61:b7:d2:04:29:1b:9f:4c:f2:8c:7a:
84:7e:ad:5f:90:7c:a1:df:93:85:3b:74:2d:00:8b:
93:0e:76:46:fc:e2:e3:b1:73:3e:41:ac:25:0f:57:
2f:4e:0b:1e:7b:78:a2:b2:83:56:d9:1d:48:c4:a0:
81:54:7e:99:09:bb:04:aa:40:5f:70:ba:0c:57:ac:
d4:62:c3:28:96:38:89:a7:84:28:f8:6e:48:e8:83:
7a:7b:fb:4a:ab:2e:39:01:c6:59:fd:0d:5e:0f:8a:
16:68:12:86:52:c5:27:a7:75:88:9e:21:c1:23:d0:
8b:d2:d6:ff:27:26:f0:00:1e:b2:87:99:57:28:25:
de:e3:7b:e4:ea:12:7b:e0:74:c6:64:ad:81:23:71:
54:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:65:A9:DC:C0:2B:C0:E8:76:87:EE:06:70:5C:0E:6C:99:2D:E9:32
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AD544/459C89E475F211EBA3ED3647C4F9AE02/AWWp3MArwOh2h-4GcFwObJkt6TI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137454
sbgp-ipAddrBlock: critical
IPv4:
103.109.96.0/22
IPv6:
2402:77c0::/32
Signature Algorithm: sha256WithRSAEncryption
0e:72:30:41:a4:06:ea:a5:a7:2a:7c:82:c5:51:ae:21:7d:41:
12:03:59:8d:b8:29:f1:db:f8:b7:77:2f:4d:97:84:60:0f:06:
24:19:ca:d3:65:d1:bd:62:fb:5f:06:9d:48:2e:d8:e1:a2:2f:
c1:3d:9e:e6:4c:01:b0:ba:65:ac:56:0a:0d:dd:50:37:ba:b5:
b4:5b:f2:97:54:44:ed:27:42:6b:dd:0b:be:2b:cb:74:95:19:
1a:25:ee:3c:cb:1f:4a:a9:1b:1e:17:33:ce:93:b7:89:ba:fc:
5b:7e:53:00:8b:0b:b8:1b:04:d7:80:f1:e2:12:25:86:5c:9b:
f9:ce:e2:e6:a0:b4:b6:ae:9a:98:0e:eb:de:cd:72:fd:be:64:
5d:b5:02:29:c1:a8:60:89:03:cc:03:43:a7:2d:93:06:9c:8d:
0a:50:e2:62:f3:7f:c4:fc:ef:2d:6a:58:64:40:53:08:11:d6:
1f:e4:9f:e7:0f:1d:de:11:a4:d8:61:da:3f:d9:f7:2f:b3:6a:
c0:79:c5:c0:88:46:3f:c3:0e:88:73:db:15:d4:cd:dc:14:f7:
e9:18:02:02:f6:ec:85:88:9a:4f:d5:f2:0e:d6:33:aa:74:9a:
a6:0a:7f:61:16:b5:bb:c8:4b:90:82:f7:b2:f8:79:b9:f8:41:
f2:0d:38:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:03:02 2025 by rpki-client