Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer
File: AduB721jlOZtOzIxW0eevteZyTc.cer (raw, json)
Hash identifier: jEkj8wKqdmaC0r+6vigVmc3q3VpnDI348a4SXe1nayM=
Subject key identifier: 01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023383
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 27 Feb 2025 00:04:44 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 134684
IP: 202.128.108.0/23
IP: 2400:fd40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 14:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144259 (0x23383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 27 00:04:44 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91FECDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:5b:73:a5:cc:9a:89:19:23:ac:99:98:7a:
25:93:61:77:5a:82:06:9c:75:e1:6b:31:3a:2b:99:
ae:e6:85:2a:26:f5:13:cd:05:43:39:6f:97:ef:2d:
20:1d:53:70:12:96:6b:d4:6f:8f:7d:78:e5:2e:8d:
89:f4:3b:ce:a4:96:e6:0c:28:3a:5c:3b:e9:73:ac:
0f:8e:8c:55:6e:4e:f3:e0:85:ff:49:89:c8:74:ec:
10:2a:df:c7:90:49:99:a0:36:f3:cc:47:e0:7e:50:
f6:68:f9:af:e3:2f:b9:18:fc:1f:c5:52:d2:03:e2:
ee:8a:e8:0d:1d:cc:ed:67:af:f7:22:26:8c:01:a3:
27:be:f8:53:36:7b:4d:d9:95:20:62:26:8c:10:7a:
66:eb:08:81:8d:c3:96:0b:2f:1f:57:09:93:f0:61:
13:a2:f6:f2:a3:3f:a1:0e:d0:a4:2e:f2:53:dd:73:
f3:40:e1:7b:2e:7f:4d:e4:cc:46:ba:83:86:a0:13:
06:ce:26:e5:49:95:03:a2:d7:75:1d:f9:7a:ac:0c:
32:f9:33:91:e5:f0:d7:22:d4:6e:ff:54:e8:08:c2:
87:f0:d2:4b:a5:36:5e:b4:1a:68:36:92:8e:d7:17:
a4:8c:2a:09:0c:df:00:e3:95:a3:4f:b4:84:f4:9e:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134684
sbgp-ipAddrBlock: critical
IPv4:
202.128.108.0/23
IPv6:
2400:fd40::/32
Signature Algorithm: sha256WithRSAEncryption
36:4f:cb:5c:5f:05:34:7c:fb:4c:64:5b:ba:61:5e:2d:48:b8:
e5:13:e6:fe:2d:d6:87:67:c6:96:68:f5:50:85:dc:96:69:f7:
42:48:29:37:19:43:c0:4e:b8:29:e0:c6:e4:09:e0:8a:a9:0e:
3f:6f:91:5f:fd:f0:8e:d1:a2:3a:d2:61:ec:80:60:10:91:34:
ae:08:6e:8d:1d:76:ae:19:fa:ce:68:15:f9:f2:e0:8a:ba:96:
51:f7:7d:c1:8e:4c:7b:05:87:c1:a4:90:6d:5a:d2:d6:ac:67:
0a:67:14:f9:1c:31:96:d3:aa:34:ef:c8:aa:ad:54:84:ea:dd:
6f:a4:85:22:a9:e5:35:30:42:28:c8:d3:b0:b4:14:6b:04:ca:
5b:1e:08:75:33:5f:9e:6f:73:32:2c:c5:62:6b:95:de:c8:cd:
e5:53:cf:8b:01:db:85:47:35:42:bd:a3:19:49:b0:7d:03:73:
b8:f1:51:2a:26:06:63:43:ee:7a:1e:31:07:ce:d1:ad:17:b2:
a2:7b:34:df:49:6f:00:3a:27:bd:eb:0b:45:fe:8f:43:56:72:
23:0c:a6:ab:11:25:ee:43:c3:cf:5d:fd:fa:94:bb:c7:9c:2c:
ba:b4:ea:d9:b7:87:a7:2c:f1:4f:9d:ac:b0:f5:72:6a:67:55:
b4:bb:93:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:34:33 2025 by rpki-client