Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
File: M3je4rOhqNPtGvTkXiJdAJnPcBE.cer (raw, json)
Hash identifier: YxTMeE4qqC90W16ROZZc+psEnZIxM5j5tIPpws+2TOk=
Subject key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02379C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 15 Mar 2025 13:48:06 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 149474
IP: 103.180.112.0/23
IP: 2400:52a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145308 (0x2379c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 15 13:48:06 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A915B556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:cd:d7:b1:d9:5c:77:d6:f6:0e:37:33:b0:
99:21:94:23:cd:45:53:7c:d8:85:bf:24:7b:f5:51:
c7:de:3c:60:11:bf:33:ac:4f:d7:df:ee:94:8c:3b:
a3:c7:29:85:5c:2a:49:04:ca:34:e9:02:d7:37:8e:
65:aa:93:20:4b:ee:3e:b7:5f:31:e1:00:11:1a:74:
aa:f6:fd:08:fc:79:c1:d7:0e:4e:ba:7c:ff:a3:d6:
90:67:d6:87:36:c7:fa:ee:08:92:ef:e1:48:f2:22:
7d:2e:f3:f7:ec:c7:c0:37:15:1c:1a:5e:8b:e6:0a:
0b:4e:90:3f:76:ce:57:63:a2:c4:03:a3:61:bf:26:
52:25:10:91:a0:d2:0f:ef:99:e4:ba:89:db:31:9e:
85:fd:a5:2d:4f:56:60:b7:1f:8e:97:62:69:10:55:
8e:d0:32:9c:98:63:46:05:31:8c:b7:da:d0:1b:86:
38:dd:77:1e:7b:51:00:0c:54:2f:57:ff:da:e4:b3:
be:66:0d:47:9f:2c:83:7b:f4:0b:ba:f1:43:87:f2:
f6:77:2f:08:4e:1e:63:f5:6c:14:9c:c5:4b:16:75:
49:3d:eb:0d:72:e0:bd:2b:9b:53:f0:e1:63:40:7a:
db:46:c5:5b:ba:43:2a:4f:13:74:9a:dc:ab:55:37:
57:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149474
sbgp-ipAddrBlock: critical
IPv4:
103.180.112.0/23
IPv6:
2400:52a0::/32
Signature Algorithm: sha256WithRSAEncryption
9d:8d:be:3c:13:39:44:8c:17:56:61:52:38:22:03:18:ad:5b:
c4:16:ad:28:79:25:6f:1f:53:74:34:2b:1c:93:be:e8:b9:66:
ae:91:36:0b:d5:f6:80:a3:35:b4:ec:9e:dc:cf:38:b4:bd:70:
f2:58:1c:1a:12:12:e3:b4:bd:92:09:b8:3b:84:65:ae:bb:9b:
76:98:dc:64:a1:79:69:6e:38:c1:2e:ca:b6:11:ee:36:4a:ea:
6b:a4:ef:8f:10:4c:90:f4:a6:5e:2d:4e:bf:6a:d2:83:a4:b0:
ef:11:40:87:8c:27:2c:c9:20:fc:98:eb:5c:a9:93:4d:f5:f5:
25:55:f5:7b:9d:90:21:bd:5a:44:e4:fb:f8:0f:5a:11:92:48:
a6:06:07:82:84:a5:aa:10:36:d0:e3:10:a5:5c:a9:bc:08:f7:
86:13:95:a3:24:49:0e:e9:88:45:21:dd:18:71:5a:04:e7:5b:
7d:04:a9:65:06:77:ce:16:bd:41:7f:c9:6a:74:a1:54:54:be:
77:ae:ed:97:ed:41:d2:c3:45:5f:93:2a:cb:6a:9b:97:f6:d5:
d6:cb:59:09:f8:83:e9:3d:ec:e4:64:0f:0f:a3:67:71:d8:a9:
bc:b6:fa:f7:d6:de:94:16:ff:ad:f6:8a:39:9b:8e:37:c5:2d:
cf:82:2b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:08:58 2025 by rpki-client