Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer
File: P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer (raw, json)
Hash identifier: /rR7a+iPkIT3mAD6GQAxWFd3dZKMWXr1gr4TxT7PHHY=
Subject key identifier: 3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023DD2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 08 Apr 2025 17:03:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 152724
IP: 202.49.248.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 22:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146898 (0x23dd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Apr 8 17:03:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A9186753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:81:2b:4c:63:ef:7e:5e:5a:dd:91:67:5f:
b1:4b:60:70:c9:80:5d:e7:1e:b8:90:4e:c9:06:2f:
d4:29:0a:af:5a:49:a8:ca:f5:58:c9:c1:a8:6c:51:
c6:e8:c5:b9:46:82:0d:00:f9:ef:c4:ad:1c:ad:bc:
d4:10:6a:56:3e:9e:c6:19:c8:ad:e6:bc:b3:b1:e1:
61:56:a1:29:d6:03:35:f9:45:af:3b:e1:88:de:38:
66:08:f2:05:69:42:7e:f3:76:83:15:8f:9d:b1:45:
80:d7:6c:e6:30:1f:97:33:f6:79:16:71:b9:61:76:
f1:c9:b0:f2:b0:fd:db:2b:34:0f:1e:e1:56:76:12:
74:d8:2f:f7:6b:d0:71:a6:bc:b0:87:ad:bc:5d:d5:
e7:c6:b4:fb:47:53:24:28:dd:9d:4c:7b:5d:12:78:
0a:9a:08:0c:ff:58:6a:dd:f2:56:43:df:c8:3f:6c:
ef:92:96:9f:f0:94:09:71:2a:23:5e:2b:eb:11:04:
f2:a0:2a:40:5b:07:bc:70:50:aa:b5:a8:78:df:80:
ca:3a:91:86:b7:f7:d6:b0:15:ca:78:e9:0a:2f:02:
5b:0d:14:f3:d4:df:10:a4:35:a0:5a:00:2b:02:d6:
e8:6a:9f:dd:4d:33:b5:dc:f8:f7:97:a5:d7:82:6e:
27:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152724
sbgp-ipAddrBlock: critical
IPv4:
202.49.248.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d1:5d:78:b7:0a:b4:28:b6:3d:7d:3f:99:a9:01:1b:06:88:
ed:40:2d:f2:dd:0f:c9:ee:da:b3:64:3f:54:85:db:c9:1c:7b:
cc:4c:b5:c8:f6:44:f0:16:f2:2f:5e:21:45:ad:d0:82:01:e0:
97:01:88:c6:f1:f4:bd:b4:76:bf:a8:71:34:25:35:98:cc:f6:
6c:23:dc:b2:f3:be:1a:74:37:29:a6:1f:cf:f2:bc:93:50:cf:
08:3c:d7:18:d7:41:76:fa:31:25:6d:58:17:9e:72:44:d5:90:
e3:cd:95:e8:18:1d:76:a4:12:18:5e:27:2f:f9:87:ff:f3:ef:
32:c6:58:96:f9:ba:3c:58:a9:6b:9c:e6:3f:d1:8e:42:c2:30:
3e:af:87:1c:37:46:a2:4f:bb:da:88:90:1f:aa:81:84:b5:d3:
bb:16:77:83:0d:fd:1e:08:a3:db:c2:6a:ac:4b:17:04:c8:c3:
dd:75:29:14:8b:b0:96:4e:24:51:56:e8:44:ff:f0:aa:c7:5a:
11:a2:ed:5a:f1:09:55:d8:e7:32:4d:fb:f0:4e:58:a7:f0:0b:
5b:de:02:54:52:7d:c5:e1:6f:5a:00:00:cd:63:e5:68:0a:e8:
47:07:13:74:46:7a:d5:52:84:06:93:8b:09:6c:8d:64:38:ab:
af:1e:bc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:19:11 2025 by rpki-client