Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer
File: C99de_bArcNvIwEoNtjC3CQnkzw.cer (raw, json)
Hash identifier: KnSbXgJgm5uhHfyD7mfikvW2+uxcgUihZnBSyAwgYA4=
Subject key identifier: 0B:DF:5D:7B:F6:C0:AD:C3:6F:23:01:28:36:D8:C2:DC:24:27:93:3C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02328C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 21 Feb 2025 09:32:31 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 139769
IP: 43.251.8.0/22
IP: 103.42.104.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144012 (0x2328c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 21 09:32:31 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91D6499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:f4:56:47:62:23:13:d2:76:81:c0:6a:65:
5f:d2:66:84:c7:0f:b5:85:09:70:dd:c4:02:8e:99:
7e:f1:11:d1:8f:d6:7e:df:6e:36:06:55:a2:a7:0d:
1c:b3:21:9d:b2:5f:c6:9f:ca:a3:c2:b1:0f:16:f7:
04:09:87:2e:f4:39:eb:00:7d:03:3c:01:e8:52:4b:
1e:0b:5e:9c:38:61:89:57:34:dc:80:b2:1f:bb:f2:
94:fa:f3:9f:91:98:49:58:0f:cd:29:0d:0a:7e:88:
99:46:49:b0:76:4a:99:18:86:d5:1a:fe:68:da:59:
22:2b:84:12:f9:ea:fb:96:03:59:85:50:18:da:b2:
7a:5c:e7:bf:a0:03:74:e0:9a:83:00:b0:5a:38:88:
b8:d5:e8:98:83:1e:64:85:8e:8d:8b:3e:3c:29:82:
4e:1d:4b:76:a1:0a:1e:39:c4:6a:45:fc:b1:b2:1d:
54:4f:28:c3:7e:db:cb:6e:1c:f4:44:f9:78:48:69:
87:f4:ca:4e:ec:08:fd:23:0c:de:1b:2a:5d:b8:79:
96:9b:7a:6a:82:7e:f5:3b:c0:f9:5d:a4:aa:67:33:
8b:9a:db:13:a6:9f:ed:55:8e:7f:0b:4f:2a:b7:4f:
9f:c9:b3:1f:8e:82:bd:ba:21:05:7f:06:8a:6c:36:
eb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DF:5D:7B:F6:C0:AD:C3:6F:23:01:28:36:D8:C2:DC:24:27:93:3C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139769
sbgp-ipAddrBlock: critical
IPv4:
43.251.8.0/22
103.42.104.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:04:52:46:4e:40:d5:ef:e7:73:8c:5e:78:08:f7:c8:ee:74:
f7:fa:cc:9b:f9:d0:d0:fa:41:bb:c7:94:b7:ac:a1:d8:08:c5:
1e:72:2e:a0:00:3a:f1:f7:68:6b:53:1e:a9:3b:23:84:58:27:
0d:e4:1d:d6:8c:09:61:b9:5e:78:2e:78:11:20:45:72:3a:f7:
2e:9c:05:af:b3:cd:18:10:14:5d:e1:1e:a7:c8:d9:ed:02:bf:
61:d2:d3:a4:02:f5:3b:1a:1c:4c:aa:05:3f:b3:6a:07:43:cb:
24:fa:c5:10:cb:11:2b:b1:f3:62:be:81:64:61:22:f5:7b:1f:
16:8f:db:73:5a:ca:eb:c3:eb:ec:1e:7d:a8:8a:b0:db:21:4b:
e2:84:00:31:03:73:5e:b1:90:07:53:96:d0:21:3a:1d:e0:1f:
0e:c9:ce:10:31:a9:83:2f:c5:07:57:ee:fa:dc:49:85:0f:dc:
a8:49:6b:d8:04:4e:3a:3f:94:45:a7:08:dc:b5:35:cd:3b:a2:
91:db:94:b6:9e:9e:d8:e1:d6:97:82:ba:ba:f4:a2:c1:8f:84:
f2:09:70:dd:9f:98:1b:3f:74:06:68:b4:3c:17:55:ef:26:93:
da:68:26:6e:1e:97:76:10:6c:37:14:df:0f:25:bf:c2:25:e5:
b1:ef:ed:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:16:46 2025 by rpki-client