Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
File: Kt1a2PtDrdgNUrtYNpPDG42asuw.cer (raw, json)
Hash identifier: DxDgp1dYG8ive9paXHYCFVKhk8p9EIU99vY0g3/Ha/w=
Subject key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02348C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 02 Mar 2025 13:15:23 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 137415
IP: 103.107.184.0/24
IP: 2001:df3:e300::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Apr 2025 00:59:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144524 (0x2348c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 2 13:15:23 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A913149F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:dc:d1:da:c4:2e:28:2e:4a:1f:cf:d2:aa:
e2:16:98:9a:eb:19:20:c2:55:29:76:e4:8b:14:c2:
1c:b8:d4:fd:08:ce:8d:48:1d:fb:67:c5:79:56:e0:
cf:d5:ef:d7:98:9f:52:35:c5:bd:d9:9e:12:2c:f8:
64:f9:92:e5:0d:d4:46:a5:6e:46:6d:18:18:97:c7:
7e:38:20:c7:ab:bf:39:38:07:61:2c:e0:b7:9b:3f:
d6:63:d1:14:39:5a:e1:33:01:26:10:83:c8:9a:c4:
e3:db:6f:65:a5:8d:4a:b1:07:ef:c5:89:7e:b7:cf:
26:c6:31:52:05:24:c4:e6:b2:48:4b:dc:2b:90:12:
41:7c:b7:60:03:8e:28:a1:89:84:8d:2f:92:c4:ef:
eb:df:e9:ad:0f:57:1c:33:75:d0:9d:70:4e:1d:e5:
29:08:a0:d6:e7:a0:70:44:22:27:e1:11:ff:fd:d7:
b5:0a:5c:93:cd:e4:03:a0:06:ec:73:93:6b:65:66:
01:0b:f4:33:37:68:ff:ab:a8:8f:ec:08:14:e8:90:
ab:c5:3a:c4:35:9a:88:5b:d1:58:8c:09:ba:ca:53:
5a:e5:52:d2:f0:1b:17:12:45:c5:bc:87:40:68:ed:
ce:f1:cf:70:64:4d:9f:6b:10:e2:4f:89:22:db:52:
e0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137415
sbgp-ipAddrBlock: critical
IPv4:
103.107.184.0/24
IPv6:
2001:df3:e300::/48
Signature Algorithm: sha256WithRSAEncryption
45:97:91:41:d8:a0:8b:b0:2b:a8:34:72:d1:3b:ab:76:5f:4f:
77:96:50:43:b5:82:8e:c6:3f:5a:78:6d:33:23:ab:88:5e:cc:
2d:2e:7a:b1:73:e1:84:57:e6:54:e1:26:b3:a9:56:34:03:7f:
eb:5d:b5:d4:f7:63:54:71:b8:d8:a8:55:a6:af:a1:91:b7:fb:
5d:50:4e:47:dc:81:ec:5a:80:4e:a3:fd:9c:c5:85:9a:44:ee:
c7:29:38:8a:3b:78:e9:07:c0:bb:72:bf:7e:53:c4:a8:5e:44:
fd:29:3a:ce:2a:07:fc:99:74:f9:c3:09:5c:c8:99:10:f1:24:
25:4a:4d:7f:07:73:57:cc:4c:35:70:52:ba:3f:03:8c:9a:63:
b9:98:c7:b2:2d:38:f6:8c:89:ea:73:b6:6e:0a:69:5e:2f:21:
0f:12:02:ac:fb:3d:d4:5d:07:31:e0:be:54:da:72:ab:3d:f9:
fe:17:56:a3:e3:14:51:8f:ad:83:ff:56:b3:38:a5:91:07:f5:
76:fc:51:c8:6f:97:21:47:3d:8c:2c:87:d2:26:7d:91:bd:10:
93:7f:d5:a1:9b:54:01:dd:81:85:24:a9:b5:b4:35:06:a6:e2:
a1:2c:98:64:9d:58:07:5b:45:92:7a:a0:d4:27:10:91:87:f0:
d5:b8:67:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:57:11 2025 by rpki-client