Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
File: DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer (raw, json)
Hash identifier: c/DMOGNr2nbLVwwbKJSTY8Di+kDI+0n4yWWnSxmnvDA=
Subject key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023C10
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Apr 2025 06:15:20 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: IP: 103.85.108.0/22
IP: 119.160.232.0/22
IP: 2400:aa40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 17:46:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146448 (0x23c10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Apr 2 06:15:20 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91C731A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:fa:2f:84:aa:67:84:3c:b2:22:a3:4f:bf:
07:9c:d7:55:01:a4:61:e8:1b:e5:f5:18:10:67:4e:
01:29:12:fb:f5:ae:ce:15:55:72:f7:a7:4d:25:57:
f9:f6:42:04:1b:d0:b3:42:13:cd:b9:4b:5f:cd:12:
ae:8a:90:dc:ad:9b:7a:81:b0:a1:e4:97:3f:2e:01:
56:3b:92:9e:80:83:a1:50:e8:ab:53:39:bb:4a:32:
8c:80:84:72:d4:d5:ae:47:73:e2:48:a1:0c:27:6a:
86:c5:95:5f:4e:6a:e4:e8:2b:a4:50:ea:4b:6f:85:
70:75:d2:c9:d8:54:07:5b:c0:23:63:06:52:14:ad:
69:83:ef:8e:d2:6b:2d:9d:a0:f1:dd:0a:60:55:5a:
cf:0d:df:ae:3e:c0:f3:f5:1f:3b:d6:01:f1:0d:48:
b6:e0:e8:43:d5:a6:63:30:78:75:1f:b2:87:fe:6c:
df:d1:85:76:08:f3:36:17:04:a1:4e:19:b6:a2:dc:
97:df:be:a2:b2:69:6c:12:43:24:71:02:82:20:3f:
7d:3d:b2:89:55:bd:fd:8c:90:cb:5e:d8:28:91:10:
37:8b:56:14:90:45:96:5b:dc:84:17:98:09:48:1a:
ed:77:3e:3f:b4:b5:74:2b:c2:1c:ac:81:72:d3:6f:
e8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.108.0/22
119.160.232.0/22
IPv6:
2400:aa40::/32
Signature Algorithm: sha256WithRSAEncryption
76:2a:30:3c:51:46:96:87:0b:d1:a9:c3:cf:0c:91:90:ac:4b:
36:4d:6e:c0:75:c2:1b:1f:10:6e:7c:2c:d7:f5:b5:54:37:96:
e8:66:bf:40:c8:19:bc:91:30:65:33:f5:9d:6e:6a:b9:45:12:
ca:db:98:9b:0a:e1:9a:7b:d2:8d:be:94:4e:2e:88:8e:7a:47:
f3:4d:f7:3c:4d:33:1d:87:80:d0:a3:86:a9:07:a7:1f:17:6e:
f7:2f:8a:85:6f:c3:01:72:b2:54:39:01:d8:ba:4b:37:10:b9:
06:ef:ed:40:34:72:09:08:f1:99:fd:ba:26:1c:b1:ef:21:a3:
c6:35:58:f1:ab:f0:e0:4d:f8:76:2e:03:df:39:24:7d:43:37:
bd:c0:37:1c:16:e1:a0:b1:4c:ab:c4:7a:97:ae:fa:b6:14:4f:
b2:9b:18:8c:f7:18:5a:5a:c2:75:5f:66:b0:c5:fe:08:d3:62:
09:26:74:89:ba:77:c6:8b:18:9d:c9:79:d8:af:f9:4f:90:ae:
de:7e:b2:d0:b0:97:9c:d2:ba:08:52:5a:c2:7b:c2:36:98:98:
9e:7a:1c:b4:45:15:6a:4d:17:cd:50:d1:14:8f:0a:66:4f:4f:
1d:a7:de:fb:4c:3b:dc:f4:e0:e2:9b:4d:7b:22:07:60:36:a8:
72:90:bd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:25 2025 by rpki-client