Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer
File: PWRH1yl0gylOzsuFOl5QCTXRuNc.cer (raw, json)
Hash identifier: Qgw4z42mlT8VVsnzFdTnG6aHhaRxBTieLsRMOtvJ7zQ=
Subject key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02295A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 15 Jan 2025 00:02:20 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 103.177.248.0/23
IP: 2400:3e20::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141658 (0x2295a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 15 00:02:20 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A9170E11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:0c:4b:d7:a9:4b:43:ef:82:40:0d:d3:7d:
94:ac:36:59:d8:ab:4e:44:1d:1d:18:30:90:6d:de:
95:f8:bf:8f:d3:45:8a:75:7d:b1:95:87:93:9f:da:
1a:2f:07:97:7e:0c:dc:ca:34:02:d3:c2:97:a7:67:
5f:1f:82:60:93:10:88:e1:10:1e:21:04:87:2d:85:
4e:da:17:a7:d5:34:31:d3:ad:32:49:c2:1f:3d:4d:
95:83:c8:f6:e4:6b:92:1b:f8:43:6e:dc:0a:e8:80:
fc:94:af:20:9d:60:62:8a:5b:3f:ce:f1:55:a6:bc:
25:bd:69:ad:27:2b:a7:e5:ad:82:3c:eb:1d:88:0a:
cf:59:83:26:84:46:df:5f:8a:7f:84:38:cb:11:74:
8d:6e:76:de:fa:02:4d:d7:4f:4a:4e:21:04:1c:be:
a3:9a:34:0a:fc:aa:31:c9:68:53:d2:9c:43:1a:2b:
aa:9e:d5:22:e9:aa:93:72:58:db:a7:d9:7b:f6:2f:
71:e8:9e:1e:4d:ac:ca:c7:68:95:ab:67:7a:e3:5d:
d4:41:c5:89:aa:9d:53:d1:35:c3:92:3a:23:59:36:
87:25:1c:7e:94:3d:79:d6:1f:c4:f5:0e:ca:f9:06:
ab:79:a8:37:4c:f9:23:16:b0:44:02:38:5e:2b:be:
5e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.248.0/23
IPv6:
2400:3e20::/32
Signature Algorithm: sha256WithRSAEncryption
6f:9e:d6:ed:c0:20:98:6c:b0:ab:37:e9:33:43:83:47:88:2f:
62:d3:1f:fe:39:11:82:10:e9:3f:47:cd:87:db:4b:22:1d:d7:
ae:16:d6:39:81:94:85:c0:aa:74:37:1b:e4:33:17:7c:fd:d3:
71:ae:c1:4e:6a:3d:95:05:e9:55:cc:ce:91:50:4d:84:96:d0:
d4:84:3e:59:25:a7:97:d5:30:82:d5:dd:09:61:3c:a1:af:c2:
95:b5:b9:2a:de:48:ef:bb:e5:ff:de:e9:a6:d9:3c:c9:de:7b:
29:32:29:e5:85:c0:75:ff:1a:6c:c4:78:84:bf:ec:7c:db:cc:
87:87:6d:2e:a5:98:38:8c:3a:f2:4d:f8:23:ef:58:79:0f:ed:
94:ad:f1:dd:a6:5a:85:f4:3a:80:7e:c9:47:6e:60:ad:fc:5e:
33:64:b4:6f:ca:dd:6a:77:c2:4b:45:4d:68:39:27:b6:ba:c8:
10:43:40:21:95:99:15:38:15:6a:16:28:43:94:fa:08:bf:7d:
14:b4:27:90:2b:4c:ad:22:0e:c4:4e:f6:82:3a:c0:6b:fa:39:
4a:04:cc:bd:e8:db:22:97:41:82:92:5e:a2:d1:83:88:de:da:
83:5b:9c:77:92:be:18:53:e5:89:fc:dd:10:50:15:17:bd:1c:
7f:c6:c7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:09:09 2025 by rpki-client