Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
File: PusZaI0z1iGZTls9nkbsqqUJ9CM.cer (raw, json)
Hash identifier: 5DurAzy4rIejrTk98yJ3Gm8NWSKdftQkX7jQcvUQC8k=
Subject key identifier: 3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0231C4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 18 Feb 2025 03:17:45 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 58617
IP: 103.9.23.0/24
IP: 163.61.154.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143812 (0x231c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 18 03:17:45 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A91DE4AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:7b:3d:b3:30:22:94:3b:25:e2:4f:92:c2:
55:6e:54:fb:b5:65:70:26:a5:44:04:b3:5c:9c:19:
04:f6:f8:21:32:8c:6f:4c:75:5c:64:43:49:ff:f0:
42:59:11:94:ba:14:3d:32:5e:17:5e:92:1c:c5:39:
59:64:6c:f4:3d:30:fb:79:fc:1d:c5:85:b9:e9:21:
ec:94:83:28:fc:94:3a:75:44:72:76:50:bc:cb:c2:
bf:91:cf:94:78:5b:27:95:18:6b:7c:cb:ba:2b:f1:
70:23:24:06:7e:b3:17:3c:54:fe:18:36:c1:b6:8c:
6a:f6:a0:33:9b:46:4f:15:bf:58:2a:da:c3:32:17:
d1:b7:46:04:1e:f0:17:d3:b6:09:08:51:03:ba:53:
09:77:bf:88:77:c0:84:97:40:be:b8:78:74:c6:53:
50:b2:51:dd:20:af:de:55:d9:f0:00:09:c3:76:c7:
24:c3:3b:ba:05:52:09:57:aa:7b:40:2c:31:be:f0:
a2:b7:99:19:c9:a9:df:e9:e7:00:76:c2:5a:75:20:
75:25:37:f7:10:96:38:ac:b3:c5:0c:ba:02:68:f2:
f3:d4:03:44:f5:1a:37:21:d8:de:7e:b0:c3:4b:08:
de:58:b0:1e:9f:d5:0d:94:ee:7b:02:ad:93:de:87:
5f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58617
sbgp-ipAddrBlock: critical
IPv4:
103.9.23.0/24
163.61.154.0/24
Signature Algorithm: sha256WithRSAEncryption
35:72:c4:32:b1:cf:ac:5c:5e:08:a3:54:01:69:46:d4:39:13:
d0:3c:73:cc:1d:ee:28:3d:21:1d:59:0d:ef:e1:b9:cd:53:02:
5d:d4:c6:1f:e0:d5:db:96:68:74:85:7a:e7:b3:14:ba:7e:da:
87:60:9b:4d:c5:39:1a:87:32:55:af:2a:e3:af:aa:2b:aa:b6:
fd:fe:df:ee:2a:77:8c:52:44:bf:9d:45:f2:26:ae:4c:aa:f5:
8e:53:17:39:8f:cd:3a:dd:cf:24:d7:00:42:76:64:8e:7d:b2:
b8:33:7f:87:e8:ca:de:37:c2:c3:2c:69:a4:30:39:91:ee:00:
bb:f5:63:f2:c0:70:1e:08:ba:ae:71:1c:83:fa:e4:2f:d6:15:
29:f9:dc:09:4b:71:b5:1c:82:95:12:7c:a0:50:ea:ba:42:8c:
ac:73:27:b5:91:84:41:d3:b0:56:68:58:36:f1:37:36:65:ad:
9b:33:1c:31:53:de:96:fb:f7:94:a3:a1:32:62:52:67:39:4f:
06:de:be:8b:77:58:23:e9:12:5e:33:14:c2:36:14:15:ef:db:
c9:08:2d:b5:05:7f:7e:bc:62:ad:c7:e7:e0:61:45:4d:94:0d:
9c:a5:fc:34:de:8c:92:35:fa:af:9f:8a:6b:5b:49:a3:1c:cb:
fa:ff:4a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:15:34 2025 by rpki-client