Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer
File: G7ThccrEGeYWe6On1yU8dhYxoo0.cer (raw, json)
Hash identifier: j6tOSBSHVsKXvf2WhUxGnon+np8IaIropCq9UuFojVg=
Subject key identifier: 1B:B4:E1:71:CA:C4:19:E6:16:7B:A3:A7:D7:25:3C:76:16:31:A2:8D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02392A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 24 Mar 2025 11:11:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 150694
IP: 163.223.186.0/23
IP: 2001:df5:47c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 15:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145706 (0x2392a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 24 11:11:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91259CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:27:e8:ea:2b:50:02:77:e1:73:2e:79:0c:
d2:bf:c3:28:4d:23:5b:4c:6c:7f:57:e9:18:44:5e:
d4:4b:98:b6:10:e5:96:b2:c4:d2:5a:54:c1:99:43:
66:02:95:45:56:45:7d:d0:86:47:15:8d:f2:3e:23:
91:d8:bd:d1:2b:e3:6f:8a:c5:82:81:ae:e2:5a:fe:
af:49:45:24:2b:21:a2:89:6e:7f:14:05:6f:1c:f7:
b9:04:93:d9:32:30:ea:70:2f:23:61:eb:46:d9:e5:
ec:7c:e2:84:74:c2:71:fa:c9:48:0c:e3:bd:3d:2b:
c2:10:10:07:79:11:4f:c3:73:76:54:c2:39:45:cf:
7f:e7:9f:dc:72:81:8a:f6:f0:53:21:33:25:24:20:
0f:d0:1c:29:c5:13:75:0f:b4:4d:c6:83:73:85:5d:
cb:63:3a:7c:8a:40:cd:7c:5d:35:6f:9c:a0:99:0b:
97:57:b6:3b:d8:0c:27:f6:7c:21:92:07:51:ff:e1:
e1:bd:42:5f:35:d5:d5:28:c6:9a:85:77:8c:6f:4b:
2e:57:30:88:f9:62:ed:87:ed:b7:b8:ec:7f:2e:ac:
f3:94:23:33:97:5d:a3:3b:97:64:e1:55:37:ba:95:
e9:ed:90:9a:f7:6e:c6:da:25:e6:df:7f:8e:70:ac:
e8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B4:E1:71:CA:C4:19:E6:16:7B:A3:A7:D7:25:3C:76:16:31:A2:8D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150694
sbgp-ipAddrBlock: critical
IPv4:
163.223.186.0/23
IPv6:
2001:df5:47c0::/48
Signature Algorithm: sha256WithRSAEncryption
98:0f:f6:8e:e3:ab:46:40:cf:ad:e8:b4:6c:40:9c:5a:8b:4b:
21:6e:54:ca:90:66:8c:4f:e9:df:25:f2:6f:c7:6f:eb:8a:83:
48:c2:06:c4:8a:9f:e3:e9:ec:82:e1:c2:0c:1f:0c:12:22:d2:
9d:e9:70:b3:e2:d5:c2:7f:b2:02:57:c1:5f:78:c1:33:56:81:
e6:56:c0:d7:6d:43:23:03:01:28:3d:20:c9:2e:2e:05:14:f7:
57:b5:9d:9c:65:48:54:35:d7:a7:f0:99:cc:73:f4:58:79:58:
2e:27:07:e2:0b:68:a9:c0:b7:56:6c:f9:e2:1d:60:fb:95:ea:
53:89:1b:7c:60:d2:be:df:ec:6d:d4:b3:d3:76:13:ba:07:f2:
69:cd:44:ae:d8:cb:b5:2e:a2:41:ee:c7:64:05:35:e9:b4:d2:
c7:47:00:66:4b:25:50:20:d8:d3:31:07:7b:ea:22:39:e5:20:
b4:85:bd:cd:60:fb:34:1b:7d:da:dd:ca:75:64:af:87:55:6e:
36:1e:65:16:32:08:e7:f9:b1:01:97:be:be:47:67:3a:00:20:
11:9a:ec:41:b5:31:ea:25:87:a5:ed:78:99:99:fe:bd:d4:9f:
da:ee:58:b7:78:79:5f:fd:9a:1e:eb:c6:37:55:de:69:88:a0:
1a:a2:d5:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:33:35 2025 by rpki-client