Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer
File: C-AoY1W14laYjORU35P8D8p_YEA.cer (raw, json)
Hash identifier: 53GsGU/wabPV5GxFw0iQhtj3pI6Ut+GFZRJA3lsML34=
Subject key identifier: 0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02355C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 04 Mar 2025 19:41:24 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 103.67.20.0/23
IP: 2001:df1:cf40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144732 (0x2355c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 4 19:41:24 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91A1D43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:28:a2:8f:33:6b:11:b5:69:08:fe:e0:68:
b2:f9:2b:8c:37:4c:45:2d:04:6b:02:e8:0b:f9:51:
6c:b9:7a:e8:4b:77:ef:d8:c6:5d:96:c1:ef:70:53:
0d:7b:7e:00:71:3b:26:74:3f:34:53:48:91:56:73:
65:bc:b4:57:83:c7:8d:16:f1:c7:f0:82:3a:1e:44:
9d:2c:b5:26:f1:a1:3c:fd:f4:4e:af:57:0b:9d:ad:
ff:98:5f:db:6c:90:58:a5:49:40:84:ee:5a:d6:b0:
b5:0d:96:31:7e:5d:30:b4:1a:fd:69:3a:49:52:21:
ca:7a:68:85:2a:ed:ba:ca:27:6c:85:b9:40:fe:9e:
7a:2d:0e:c6:65:63:30:1e:55:3e:5c:62:88:95:fb:
94:07:5a:5e:0a:a4:90:ab:85:ed:70:b5:89:df:4d:
18:e0:ba:4e:61:24:61:10:51:02:86:65:59:d4:44:
ca:fd:e0:a5:21:6e:bb:e5:27:c8:29:b3:03:78:b0:
e0:77:af:cd:14:6a:61:66:5b:d5:b7:46:5b:2a:d4:
56:34:8c:71:c5:8e:ff:4d:5a:9a:08:d9:05:01:31:
46:24:92:f0:f7:6a:5d:05:d5:57:46:96:a4:70:95:
0f:45:86:1a:23:37:1d:a1:c5:d2:42:4c:bf:aa:d0:
17:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.20.0/23
IPv6:
2001:df1:cf40::/48
Signature Algorithm: sha256WithRSAEncryption
26:b8:3b:67:f8:02:ee:a0:62:b7:f0:ea:bb:59:43:ad:ae:46:
f4:44:bb:9d:f0:62:bb:fb:ce:61:5e:71:c2:20:a2:b2:95:ed:
37:94:56:78:64:2a:8d:94:f1:fb:20:28:1c:31:a4:63:c0:e6:
1d:e5:10:a5:b7:c3:d5:1a:4c:e3:84:3e:2a:d1:a6:07:73:9e:
94:35:7a:b5:fb:be:86:03:43:9d:2f:99:1f:2d:cd:db:4e:7c:
fb:96:bf:f9:b7:65:1c:23:a0:46:1f:3d:90:a4:b3:65:2d:bb:
d4:96:e8:1f:d8:6b:b7:81:cf:50:ba:5b:b4:2e:43:6d:5a:14:
23:59:41:65:4a:00:74:dd:1f:cf:50:7a:0f:26:54:09:d4:88:
fd:a3:d3:91:67:5e:8e:02:c7:d4:1f:7a:db:40:97:38:20:6a:
9f:8f:6f:85:00:79:2b:21:2c:a3:67:ad:d8:74:6d:0b:eb:6a:
2b:49:49:01:62:6d:d4:3e:3a:10:da:75:dd:50:7f:b5:da:e3:
2b:60:2f:75:d4:2c:0a:e9:e1:d8:e4:50:f7:01:a6:9a:6d:3c:
be:04:0f:f9:24:23:5d:3c:73:27:50:77:21:f0:a2:ba:cf:15:
d1:d1:a3:fe:57:ab:24:57:ee:16:25:11:39:bc:cc:1d:f2:5e:
22:4b:75:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:56:38 2025 by rpki-client