Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
File: K0TIiRquK4of20jr9KV-mJrrc2M.cer (raw, json)
Hash identifier: ZxRI6a3E+iznqPHXq3+pY/c+OnpN5sXL77nEASi9Kmg=
Subject key identifier: 2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021FAD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Dec 2024 19:15:34 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 103.174.168.0/23
IP: 2001:df7:cc80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139181 (0x21fad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 2 19:15:34 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A918BBBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:03:33:0d:f5:a2:79:90:1c:8b:e8:5d:3b:a0:
9c:78:a7:87:ef:11:dc:c0:8d:3b:57:25:9e:35:7c:
d0:54:68:0d:58:1f:16:d1:1d:3d:ea:17:0c:72:cb:
f2:ef:76:bc:71:16:06:f2:d2:f7:64:7d:7e:94:08:
2b:a3:ba:9b:2c:97:1e:3d:c3:05:d9:8c:b5:70:2c:
86:dd:5f:63:e5:b1:de:b9:11:18:bf:ea:7d:a7:3f:
ba:5d:5d:6e:5f:6f:6a:76:9c:13:a7:f9:ca:fc:bb:
f1:79:66:a5:d0:6a:05:48:d0:d9:03:11:53:7f:6e:
3e:ff:72:b8:ac:58:d0:a2:c0:c9:fc:03:5f:27:f2:
4d:b2:a1:1d:e6:72:64:b1:94:8c:57:c2:4e:22:15:
ac:34:3b:89:17:a1:3b:a4:46:1d:70:ac:fc:1e:d6:
1d:02:57:e7:0b:aa:d0:47:64:ab:2e:69:95:2d:7e:
57:9f:66:a4:67:49:bd:37:12:5e:5a:80:b8:a2:9d:
1c:79:f2:1a:0e:fa:84:6d:81:9a:ac:5a:62:33:6c:
a7:45:79:a7:5d:c0:5d:41:ce:e7:83:e8:b5:f0:ee:
7c:8a:46:b4:2e:5d:b1:82:27:af:b1:50:37:0b:e3:
d7:00:69:85:5c:cf:17:65:3c:d6:55:11:a6:e5:d1:
47:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.168.0/23
IPv6:
2001:df7:cc80::/48
Signature Algorithm: sha256WithRSAEncryption
22:f6:b1:c4:ea:3c:87:a7:31:1b:84:f2:6a:64:a4:4e:9b:94:
86:c0:1f:4d:f2:0c:ae:f7:bd:96:28:ab:38:48:10:5c:e3:31:
4d:06:c9:ab:71:d7:0f:e1:74:57:86:31:3f:26:9a:3a:58:6d:
08:0f:ea:fa:33:13:8c:06:bf:8f:ef:b5:49:c2:c9:51:cd:4d:
33:e6:aa:7e:56:f9:43:d9:ef:09:b8:ec:24:78:0b:41:46:6c:
76:06:0a:6a:97:2f:cf:69:db:f1:1b:11:f6:70:23:03:3d:1c:
b5:b8:58:e2:81:3b:05:1b:8c:f5:a0:04:c0:2d:3b:96:fa:7f:
05:5e:99:38:39:35:13:ee:12:2b:e1:21:ad:78:33:46:c4:c6:
f8:e2:27:16:79:f5:8c:9d:63:96:77:2d:c2:1d:b8:53:d8:6e:
68:c2:fe:ee:75:56:47:14:c9:ab:7a:5a:73:f9:b1:7c:ad:de:
a5:cb:06:61:57:f4:19:c7:91:b2:1e:dc:a2:89:db:f9:cf:54:
72:a3:9d:45:d6:bc:e3:19:ca:68:c5:fa:a8:13:41:c0:72:57:
4f:5a:e5:20:af:b7:68:22:3f:c2:16:d2:34:43:75:51:01:2c:
0c:0f:92:84:a3:58:3e:d3:c1:9c:35:ae:8f:bc:8c:d1:32:9a:
84:c4:90:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:10:20 2025 by rpki-client