Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer
File: HtdycKSBilV07-7Kyvt0g812iCE.cer (raw, json)
Hash identifier: Czio3smc2FvwYTpolxUNdTmNyg7gx3mKNfcgqO6lRYw=
Subject key identifier: 1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02360F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 06 Mar 2025 19:40:14 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 137033
IP: 103.149.72.0/23
IP: 2001:df5:c780::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 17:46:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144911 (0x2360f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 6 19:40:14 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91CFE58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:15:d2:17:cd:f0:ae:b8:d9:64:43:75:36:
d3:84:e8:6b:a2:05:86:3f:ec:f5:5d:d1:78:32:bc:
bb:32:b4:f7:02:6b:8e:e0:12:37:b0:e2:3d:73:9f:
56:75:1f:03:df:58:8b:71:de:a1:14:bd:35:39:23:
c7:85:ba:1d:da:a8:32:bd:79:1a:63:47:ad:01:77:
85:1b:3b:60:ec:33:e2:19:89:ca:23:94:4d:0c:a4:
be:42:2d:87:29:e7:23:e3:e6:fb:d4:e8:ba:15:39:
82:3d:c6:2b:29:5e:4a:e3:d0:42:4d:c1:49:e3:19:
39:0c:e1:49:5e:84:ca:11:6c:eb:c3:e7:08:55:6d:
f0:9b:bb:1e:75:5e:d9:1c:ed:84:99:fc:6e:3a:d7:
84:e4:ed:ca:36:79:73:18:c0:d9:4c:ba:96:fb:4c:
e6:f6:1e:00:d2:fb:a3:f7:fb:56:5f:87:ed:c4:c7:
20:93:05:20:0f:e1:e4:bd:ef:9a:75:71:17:54:d8:
71:9f:a2:51:e1:51:e7:ba:b1:aa:7f:ab:5d:74:31:
c8:b8:5f:ed:a8:bb:65:3b:80:fc:67:4b:53:5a:6b:
30:9b:2d:62:76:a1:9a:53:b8:ac:8a:e8:78:61:a8:
91:41:9a:5e:70:e0:7e:5b:07:99:07:5c:c7:f8:2b:
d8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137033
sbgp-ipAddrBlock: critical
IPv4:
103.149.72.0/23
IPv6:
2001:df5:c780::/48
Signature Algorithm: sha256WithRSAEncryption
b0:62:26:ea:d5:03:af:65:ef:88:82:3f:46:a3:bc:10:d4:e5:
25:98:12:eb:1a:fb:21:47:b9:92:28:ac:19:1e:da:26:5c:e2:
59:ef:8b:3b:40:af:67:18:e5:40:2c:aa:90:bf:1a:17:e9:35:
9a:96:1b:e4:98:58:10:f9:c2:da:07:91:9d:65:75:05:02:93:
2b:20:7b:7f:24:3a:5f:66:42:a4:dd:48:47:35:c1:2c:51:e6:
7e:4c:2d:9a:ae:9b:33:14:f0:b2:6a:bd:d9:e1:d1:c5:d6:ec:
e3:7e:66:56:82:7f:f5:e8:48:d1:fb:96:76:19:18:3a:6c:b0:
74:87:f8:f3:f4:c8:5e:61:36:56:7f:32:75:c7:fb:9d:c8:a0:
fa:0b:a5:00:99:af:56:32:07:71:4c:94:0e:4a:5f:f8:1a:c2:
34:a1:60:32:6d:40:26:9a:5a:a7:f5:5f:d1:6a:39:ba:0e:d1:
74:ee:c9:f2:e7:7e:dd:36:c9:57:bc:85:e3:49:79:bb:68:ac:
0e:69:ee:a2:95:a3:48:1e:f5:23:6f:6b:5e:98:66:61:39:24:
8c:3f:dd:99:ee:7c:86:b6:22:9b:b4:54:10:f1:9d:95:0a:52:
54:1c:d3:48:71:a3:47:20:9d:08:0f:28:15:27:2d:32:ee:5b:
7f:91:0d:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:24:44 2025 by rpki-client