Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
File: MMRROGeLe9mvTFyk6xpdPiBhxcE.cer (raw, json)
Hash identifier: PFMYzh9uk8Pq6HVmCUqvAory762OegMW7z3cjIykJ+s=
Subject key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02229C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 13 Dec 2024 18:45:42 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 138394 -- 138395
IP: 103.124.124.0/22
IP: 2403:df40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139932 (0x2229c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 13 18:45:42 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91F59A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:1a:a8:40:a8:a5:52:5d:8d:e3:5f:b9:f3:
37:9d:f2:0d:43:b2:54:e0:65:1e:32:d6:f2:e4:4a:
a5:d4:c3:7e:ca:5e:55:3d:eb:15:91:55:7f:c4:47:
31:93:86:43:bb:34:3a:2e:16:9a:8b:8b:3f:ca:81:
44:16:64:f5:a2:e7:65:47:a8:34:6e:00:c0:58:c5:
92:3f:1a:6d:5a:6d:de:23:63:e2:5a:b6:d6:55:41:
3d:c4:63:b5:06:86:3f:f1:57:48:e4:11:11:2b:31:
66:08:0a:cc:9e:65:6b:ad:23:9d:fd:93:72:46:ad:
f9:b3:8d:23:2b:56:7a:9f:9a:02:a3:57:24:99:84:
e4:c1:ff:58:23:99:2d:9a:e8:8e:53:5b:db:b9:92:
1b:64:29:7f:2d:5a:78:db:64:06:8d:a2:8f:6f:b2:
79:4e:7b:f0:86:7c:91:ee:dd:5e:ce:8e:85:3d:da:
f6:66:96:89:5e:52:e9:80:55:25:3a:8d:ac:88:f8:
7d:eb:60:fe:ad:7e:81:9c:0b:9d:4e:44:3e:8e:06:
cb:79:39:14:67:05:d3:cf:38:6f:44:c6:e5:ae:b8:
45:00:0d:f4:88:cf:7c:39:32:b2:a7:a8:93:1a:a3:
41:84:0f:a0:66:eb:e2:49:1a:e7:fb:b7:db:46:33:
67:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138394-138395
sbgp-ipAddrBlock: critical
IPv4:
103.124.124.0/22
IPv6:
2403:df40::/32
Signature Algorithm: sha256WithRSAEncryption
ba:b3:1c:2d:fe:d1:ce:e3:3f:f9:ba:1b:04:ca:e2:78:dd:10:
15:33:90:a5:78:ee:6d:79:a9:11:b7:26:73:2b:78:f1:d6:c3:
e4:8d:d2:45:c0:08:45:03:49:86:ff:81:57:96:c5:d6:29:fb:
ac:d3:5f:b5:d4:da:d1:99:94:76:e4:02:81:10:15:aa:56:9a:
7f:bc:28:78:55:7b:09:c3:12:19:4f:15:73:d7:56:60:34:68:
c0:8a:53:d2:18:df:f3:cf:89:60:46:b5:fa:80:95:79:2a:82:
d4:13:1b:0d:d2:92:da:7c:a6:eb:c9:fc:1e:6b:bc:40:cc:11:
fb:22:d2:d0:b3:fb:75:5f:01:63:62:d3:96:62:51:9c:6f:26:
06:9a:1f:97:5b:73:6e:bf:6b:4a:0a:a5:eb:e5:9b:d8:ed:a3:
b0:b3:b7:13:3b:51:28:0d:41:db:26:f3:37:93:cf:c8:c3:0b:
18:cd:c6:b2:09:96:19:5b:20:e2:25:40:e7:d4:4b:86:b5:eb:
0a:a7:6c:44:66:7d:37:22:d1:e0:b7:d0:bb:3c:4d:85:89:c7:
fd:56:9d:f1:68:00:99:a3:43:dc:9d:6f:10:27:8e:49:2f:86:
27:62:d3:45:44:83:f1:2b:2e:b6:d4:09:35:05:bd:5a:88:42:
60:bb:2b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:40:42 2025 by rpki-client