Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer
File: QWpUTLUK6kcDnxO8WMNBDH_miM4.cer (raw, json)
Hash identifier: zTRESimW7t4KgqihWANUryf/PcWQkYYLjcHwZx9IJMs=
Subject key identifier: 41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0238EA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 21 Mar 2025 13:20:39 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 103.87.188.0/24
IP: 2001:df0:8d00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145642 (0x238ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 21 13:20:39 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A913E9AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:f6:d0:9e:4c:ef:57:a5:aa:e1:2a:11:b6:
26:12:cf:e2:0f:e0:58:35:42:82:71:a8:22:42:af:
4f:32:75:c5:64:2f:22:a8:53:91:be:25:6b:59:7d:
8d:20:84:83:64:e9:c4:ff:de:45:5c:9d:59:ca:cc:
7c:be:07:f1:61:b0:ed:92:44:e0:4d:41:d0:7c:a4:
bf:4a:76:d6:ef:75:13:55:a4:86:f1:07:40:1c:3c:
ef:14:04:9a:47:77:17:2a:50:f1:a2:32:ad:57:11:
1f:75:bb:ca:18:50:15:e6:8b:1e:0b:06:d3:ae:ab:
f4:c0:b3:5c:1f:79:26:4e:19:24:4d:6a:ce:72:44:
a1:08:ed:88:51:8e:20:18:b0:c3:ba:1c:85:ce:5d:
a9:ca:9a:96:56:b8:e1:c7:96:c9:f0:5a:79:fc:7b:
e6:6b:51:f9:d9:f5:23:ab:0c:db:78:24:e6:40:ad:
c6:a3:02:30:7e:4e:a1:ac:bc:2c:4d:5c:eb:33:f8:
63:1a:6b:ad:5a:0a:fa:c1:85:9d:09:da:11:73:52:
30:4a:74:89:28:bd:37:c0:c8:8b:22:2c:d7:3f:5e:
88:ff:d3:54:3e:50:ad:75:e3:e7:2d:2e:9f:af:ee:
1e:c6:11:aa:5e:4b:16:20:6a:59:7b:0b:8c:54:24:
8c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.87.188.0/24
IPv6:
2001:df0:8d00::/48
Signature Algorithm: sha256WithRSAEncryption
7a:81:fa:e0:33:c4:50:41:d8:d3:d8:d9:c8:c7:6b:5a:78:e1:
c5:06:c3:de:23:c8:90:33:6c:cd:c2:92:0d:12:c7:4a:93:ae:
d5:4b:9e:0a:ce:39:fa:5d:a3:44:89:e9:43:50:57:b6:e0:a9:
e9:87:b5:85:13:75:47:b9:f8:6d:50:ed:a1:47:34:26:41:7d:
48:c9:7e:60:59:14:7c:f9:e5:3d:56:d0:13:fc:14:5e:87:2f:
3a:55:d1:8e:85:5e:96:af:b8:52:a3:68:4b:34:bc:67:17:1a:
b3:65:19:c6:0d:2f:da:b7:79:c6:cc:47:f0:0b:a1:67:3c:4d:
67:07:bf:49:35:93:fc:d3:f9:fc:79:2d:ff:80:39:86:97:6a:
85:19:88:0d:30:7f:24:8d:ce:5b:d8:3d:10:ee:4b:84:0f:b2:
80:78:e3:f4:c3:62:07:c8:f8:3f:6e:e0:62:d1:77:76:53:2d:
51:d2:4e:f4:f0:4c:d0:b0:48:88:42:1d:f6:ad:42:1d:fa:fd:
ed:7a:cb:d5:e4:27:e8:c0:7f:d3:b5:e3:36:eb:df:4b:27:7f:
29:ce:19:9b:36:c7:b5:e1:d2:9c:e1:23:7b:67:19:dc:b2:fc:
68:cd:a3:f9:c2:f3:4f:ab:6c:ed:0c:3a:d4:66:5e:3f:d5:97:
d2:f6:cf:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:05:16 2025 by rpki-client