Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer
File: C9usFSJfG_m2FLKjR6G5bEoPlpw.cer (raw, json)
Hash identifier: x2uMWZ2pOFhk2xR+VBTe22SvryHRULNTVFMv5l41PVg=
Subject key identifier: 0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021F95
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Dec 2024 16:54:56 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 38305
IP: 202.14.106.0/24
IP: 202.27.239.0/24
IP: 202.37.99.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 21:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139157 (0x21f95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 2 16:54:56 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A915FDA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a2:20:a3:49:89:f2:52:d5:e8:be:12:5f:99:
d9:0c:0d:fc:dd:c8:29:55:57:77:1f:39:a9:15:52:
4a:3b:74:fe:ef:eb:61:ea:35:9f:22:c0:45:a8:ec:
bf:63:16:ff:be:10:c4:b9:00:27:08:89:c7:55:f2:
70:5d:2d:c0:0c:13:c0:ef:6d:06:0a:80:f8:a9:37:
af:a6:6d:21:26:34:cc:2f:57:07:ca:bc:08:be:2c:
80:18:27:d7:2b:26:c7:88:35:47:f7:69:c6:ae:6d:
8c:c9:64:03:ee:ff:1e:82:28:f8:a3:2b:9d:1c:78:
b3:20:80:9f:80:1d:ed:84:c4:aa:37:ab:da:c1:6c:
7e:7a:cd:fb:51:fb:d5:44:70:52:b5:2a:86:e1:07:
35:0b:01:50:82:4e:70:ba:15:ad:6e:18:0d:d0:68:
e8:d4:20:79:40:56:2f:92:74:04:4e:24:95:eb:3a:
86:5d:07:51:52:37:1b:c7:e0:24:6c:13:57:b0:22:
65:ed:0c:d5:55:d5:d5:03:8c:6c:9f:11:32:3a:57:
8e:14:cb:5e:a0:e5:d0:26:5d:5f:a3:7c:07:d5:74:
69:3c:45:31:b5:02:5e:0e:fd:6d:a8:fd:fe:4e:88:
f2:c4:95:b8:a4:13:7b:c9:ae:ff:26:97:ae:f0:ba:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38305
sbgp-ipAddrBlock: critical
IPv4:
202.14.106.0/24
202.27.239.0/24
202.37.99.0/24
Signature Algorithm: sha256WithRSAEncryption
84:af:bb:4e:b3:ec:3b:00:4f:09:54:72:b3:c0:b9:06:69:75:
44:28:c4:f4:29:c1:e0:14:52:66:cb:92:3a:80:5e:27:66:c4:
e1:64:12:39:59:ce:24:58:7f:b0:22:fd:23:5a:38:89:19:ff:
83:37:87:a1:5e:e4:3f:9b:a1:7c:fc:61:09:60:ab:6e:2c:ac:
52:6e:63:9b:00:d3:4c:3a:66:00:ca:13:57:ad:32:17:99:89:
11:4f:16:8d:38:91:a7:76:2f:ad:c1:3c:75:47:d8:4d:30:38:
db:5a:b7:c3:b9:ec:7b:3c:3a:2b:80:c8:25:63:8f:01:d0:57:
0c:c4:f7:e4:41:1d:a1:bf:1d:77:fa:ad:86:eb:37:7e:a6:d5:
81:5c:99:0b:ed:a4:52:e8:f3:d5:28:c9:21:c8:d2:59:f0:45:
a4:68:1f:96:56:4a:4d:4c:a7:51:88:46:32:30:17:4a:4e:26:
72:ab:db:6d:6e:90:71:db:6a:b1:6c:a4:96:c3:c4:2f:d4:b6:
6c:5f:4e:6b:62:13:14:b1:e1:e6:7f:b0:d7:0a:2f:db:36:40:
17:b2:44:0f:3d:6c:d4:bd:fe:f5:c7:e3:8a:8a:f6:e9:67:5a:
0d:a0:1d:23:eb:30:d0:47:04:fe:4e:60:df:7e:3c:6f:cd:ab:
58:4e:ec:1c
-----BEGIN CERTIFICATE-----
MIIGJjCCBQ6gAwIBAgIDAh+VMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTIwMjE2NTQ1NloXDTI2MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNUZEQTcxMTAvBgNVBAUTKDBCREJBQzE1MjI1RjFCRjlCNjE0QjJB
MzQ3QTFCOTZDNEEwRjk2OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCWoiCjSYnyUtXovhJfmdkMDfzdyClVV3cfOakVUko7dP7v62HqNZ8iwEWo7L9j
Fv++EMS5ACcIicdV8nBdLcAME8DvbQYKgPipN6+mbSEmNMwvVwfKvAi+LIAYJ9cr
JseINUf3acaubYzJZAPu/x6CKPijK50ceLMggJ+AHe2ExKo3q9rBbH56zftR+9VE
cFK1KobhBzULAVCCTnC6Fa1uGA3QaOjUIHlAVi+SdAROJJXrOoZdB1FSNxvH4CRs
E1ewImXtDNVV1dUDjGyfETI6V44Uy16g5dAmXV+jfAfVdGk8RTG1Al4O/W2o/f5O
iPLElbikE3vJrv8ml67wugx1AgMBAAGjggMbMIIDFzAdBgNVHQ4EFgQUC9usFSJf
G/m2FLKjR6G5bEoPlpwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTVGREE3LzRGNDgxQUM4RkQyOTExRUVBNjI5QUU2MkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1RkRBNy80RjQ4MUFDOEZEMjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNK
ZkdfbTJGTEtqUjZHNWJFb1BscHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAJWhMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAyg5qAwQAyhvv
AwQAyiVjMA0GCSqGSIb3DQEBCwUAA4IBAQCEr7tOs+w7AE8JVHKzwLkGaXVEKMT0
KcHgFFJmy5I6gF4nZsThZBI5Wc4kWH+wIv0jWjiJGf+DN4ehXuQ/m6F8/GEJYKtu
LKxSbmObANNMOmYAyhNXrTIXmYkRTxaNOJGndi+twTx1R9hNMDjbWrfDuex7PDor
gMglY48B0FcMxPfkQR2hvx13+q2G6zd+ptWBXJkL7aRS6PPVKMkhyNJZ8EWkaB+W
VkpNTKdRiEYyMBdKTiZyq9ttbpBx22qxbKSWw8Qv1LZsX05rYhMUseHmf7DXCi/b
NkAXskQPPWzUvf71x+OKivbpZ1oNoB0j6zDQRwT+TmDffjxvzatYTuwc
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:37:53 2025 by rpki-client