Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
File: CfwHfzPjrWe_FHdVFno61OrLHnw.cer (raw, json)
Hash identifier: SMlEp5QcoZ+I7ROaGgs7QkmdFrCbURka+fwnPQnWmjg=
Subject key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022266
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 12 Dec 2024 14:57:53 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 9658
AS: 9670
AS: 17445
AS: 18005
AS: 18190
AS: 18389
AS: 38180
AS: 38262
AS: 45330
AS: 45449 -- 45450
AS: 56100
AS: 56164
AS: 58526
AS: 58635
AS: 58748
AS: 131212 -- 131213
AS: 131228
AS: 152173
AS: 152896
IP: 49.157.0.0/16
IP: 61.28.128.0/18
IP: 112.196.224.0/19
IP: 112.199.0.0/17
IP: 113.61.32.0/19
IP: 115.84.224.0 -- 115.85.63.255
IP: 116.50.128.0/17
IP: 117.104.240.0/20
IP: 120.89.0.0/18
IP: 180.232.0.0/16
IP: 202.0.91.0/24
IP: 202.164.160.0/19
IP: 202.175.192.0/18
IP: 203.167.64.0/18
IP: 2403:a000::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 17:46:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139878 (0x22266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 12 14:57:53 2024 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9161613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:77:60:c1:20:ec:eb:eb:b4:00:42:7d:df:
63:5c:2b:7f:5d:9f:2f:ce:85:ed:f7:84:db:1d:46:
e9:92:9d:c1:dd:6b:e1:35:d6:16:da:48:a5:a6:14:
4c:00:22:c7:36:ea:fe:91:95:c0:1f:00:0e:7e:65:
ae:11:36:68:b8:2b:9f:ab:24:7a:40:11:91:86:00:
cb:55:a5:47:00:61:3c:22:c2:7a:00:24:21:17:5e:
bf:eb:45:24:5c:c0:2e:5c:0a:d4:f5:61:4f:0f:9a:
6d:63:f6:b2:df:1f:1e:c8:17:e3:9a:e8:7d:f8:48:
cf:48:02:d3:fc:dc:de:29:af:2b:e4:27:ef:a5:cf:
3b:4d:3c:1d:a7:62:79:8e:85:60:ca:04:a3:4b:97:
df:ce:c3:02:87:f4:93:08:c3:a9:5d:36:a6:bb:2f:
38:ff:22:d2:9f:92:d7:6c:bf:7c:1a:89:77:4e:0a:
f4:ca:98:ff:f3:2c:f3:34:95:bf:eb:c9:5a:ac:d6:
71:14:7f:03:a8:79:9b:fc:84:18:3a:b4:4d:a2:d1:
0d:e9:1f:c6:7f:57:56:1e:5a:ca:cb:08:56:7e:f9:
43:a1:82:ff:59:43:1f:3e:41:ba:9f:a5:79:5e:a3:
20:98:d0:1f:83:d3:d5:f3:79:02:41:20:d9:4f:4f:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9658
9670
17445
18005
18190
18389
38180
38262
45330
45449-45450
56100
56164
58526
58635
58748
131212-131213
131228
152173
152896
sbgp-ipAddrBlock: critical
IPv4:
49.157.0.0/16
61.28.128.0/18
112.196.224.0/19
112.199.0.0/17
113.61.32.0/19
115.84.224.0-115.85.63.255
116.50.128.0/17
117.104.240.0/20
120.89.0.0/18
180.232.0.0/16
202.0.91.0/24
202.164.160.0/19
202.175.192.0/18
203.167.64.0/18
IPv6:
2403:a000::/32
Signature Algorithm: sha256WithRSAEncryption
cf:a6:d5:2c:21:ef:6c:90:24:61:ce:7e:83:84:14:74:5a:93:
21:d8:61:f7:25:e1:39:fd:93:ae:6a:b0:fb:4d:9f:7a:5d:0f:
c2:94:13:69:06:4c:8c:34:ee:f6:b3:ca:b2:81:5e:ff:c0:7e:
e0:c5:5f:27:94:aa:20:21:1a:c3:b1:01:18:56:d2:b4:98:fe:
64:78:6d:d3:7a:43:fb:73:73:90:5f:4b:84:80:c5:6b:b4:7d:
ce:b3:5c:d3:9e:94:aa:18:98:de:29:c0:eb:ec:86:d7:ce:9c:
3b:64:af:6d:e4:bc:5b:9d:c1:70:29:78:cd:1a:ee:14:76:6a:
3b:b7:b9:be:5b:d3:7d:b1:76:c9:0e:b1:a8:11:2c:5d:59:a5:
f4:ad:65:ab:10:fd:ed:d1:b2:15:2a:1f:00:3a:73:e6:75:6b:
1d:8d:66:eb:9e:ae:2f:3a:d3:02:cb:17:9c:ba:ff:21:f7:54:
f9:f6:76:da:96:2f:bc:51:58:ec:f8:49:cd:8a:ad:5f:1a:68:
82:11:e6:4b:90:4f:d7:6e:13:c2:a7:9c:49:34:74:00:d9:bc:
52:96:0f:0b:82:49:cd:13:98:74:8e:cc:15:64:f4:97:5d:17:
0d:70:d3:fd:2b:04:5d:26:9c:9d:eb:4f:83:36:b7:3c:3f:b9:
57:28:ee:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:22:59 2025 by rpki-client