Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
File: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer (raw, json)
Hash identifier: BEy3HAreF54ILDpVjT+j504cC9CwN7ZoNHf7QmHzdp0=
Subject key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021FA9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Dec 2024 19:13:28 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 43.249.92.0/22
IP: 103.23.72.0/22
IP: 103.246.252.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139177 (0x21fa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 2 19:13:28 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A918FC40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:1c:e9:77:cc:e2:18:c4:d9:cc:6e:dc:74:
9f:8e:c5:71:56:1b:be:3e:4a:e5:d6:fb:6c:ba:5f:
97:7e:bc:25:4c:38:00:a6:d6:c8:cb:e6:37:1a:cf:
e5:bf:74:1d:99:5f:1d:81:0d:ce:15:3b:4b:df:25:
53:a6:6e:64:62:b8:08:8a:d1:a6:2f:dc:49:32:13:
ce:e8:ed:88:71:ec:f0:c7:64:c7:e3:fb:d6:77:d6:
85:0d:8c:86:8f:51:aa:ef:52:a9:cc:3b:38:3c:58:
1d:fa:bf:43:3e:dd:90:60:89:90:1f:38:e1:39:e7:
62:8a:56:25:0f:09:43:3f:65:a0:0f:62:af:60:a6:
90:45:28:29:36:75:d5:ab:57:b5:c4:c0:f9:f2:78:
66:3f:1a:ee:6c:8e:01:04:fd:4b:1d:62:e2:a7:70:
c3:35:22:17:e8:86:35:21:9e:58:02:e3:0f:c6:2a:
bf:a1:28:8b:ae:75:67:77:fe:bd:a8:b1:27:1a:96:
4f:6d:b8:f2:1b:28:62:82:51:0a:6e:0e:a6:48:7c:
74:89:f1:5d:39:a1:8a:04:d5:3b:6b:83:24:24:44:
1d:ee:75:d3:1e:42:d2:e9:ea:12:c9:a7:63:93:75:
f4:0c:00:84:70:54:9b:2c:7c:11:e0:08:b8:c8:e8:
c3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.249.92.0/22
103.23.72.0/22
103.246.252.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:8f:67:e2:38:a7:ac:c8:70:61:1c:9e:b1:a6:d5:70:2b:bc:
ed:18:92:e1:ea:86:43:6f:f6:5f:1b:a4:5c:7a:a1:9f:bc:19:
01:a1:25:b4:cf:6d:04:91:6b:fe:ea:98:42:f3:26:77:74:45:
34:e4:bd:b3:b6:d3:95:5d:12:c1:83:9b:bc:4d:e8:80:ac:e0:
b5:a7:08:a4:3d:48:7c:56:17:57:4d:63:82:56:15:89:bb:d9:
89:24:7a:d4:75:73:b3:6a:8c:8f:6e:0f:af:c6:cf:ce:35:96:
80:4f:1f:44:52:c3:9a:4c:ca:52:75:f6:5c:51:34:f4:70:71:
0c:d9:eb:b4:35:44:a3:3c:b9:1a:b8:74:5f:4f:e1:08:8f:84:
f1:ba:b5:59:19:df:df:96:54:d6:98:6b:d6:82:d7:a7:91:1d:
9f:f9:d3:f1:f2:0e:12:52:9f:29:5e:6d:6c:76:db:12:80:7b:
8b:f5:3b:b3:92:bd:72:e8:c6:0e:2a:a7:95:e1:6f:4c:16:b1:
64:b1:e3:a3:48:8f:52:54:24:31:88:29:17:e2:d9:ae:29:f7:
b8:5a:f6:f8:fd:24:0a:ca:09:5d:83:ed:09:43:f0:5d:4e:c5:
ea:7b:fc:0f:09:52:c9:09:e6:a3:b7:bc:9b:9d:6f:a4:95:c0:
b7:24:56:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:57:02 2025 by rpki-client