Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer
File: QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer (raw, json)
Hash identifier: diuTB+Tsv5E5rnsw/ao8Ij2WSO5USVerSH1NGVVi0cM=
Subject key identifier: 41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0222D8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 16 Dec 2024 12:25:11 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 38307
AS: 38858
IP: 103.105.144.0/22
IP: 115.124.0.0/21
IP: 124.158.16.0/21
IP: 203.29.67.0/24
IP: 2401:8c00::/31
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139992 (0x222d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 16 12:25:11 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91144AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:9a:66:2e:16:29:70:a5:63:ec:08:7d:87:
d6:42:d2:26:b6:86:33:31:07:15:3b:e2:0f:5e:66:
1d:55:26:4a:5f:eb:93:d7:16:9a:69:d5:f4:25:c3:
5d:39:d3:6f:ef:71:33:26:14:8c:86:bd:7c:89:b6:
4a:1d:c5:6f:a8:2c:55:2d:7b:f7:5d:7e:d6:d4:14:
f2:7e:17:36:06:ab:80:9e:99:0a:bf:e6:f0:7a:f1:
c3:55:cc:8d:48:6f:49:71:ee:3b:e8:0d:12:28:78:
52:98:b9:b8:55:06:90:af:da:4b:e7:e0:08:39:99:
d0:fb:57:a4:6c:64:61:9f:d0:6d:4d:4a:89:22:55:
f5:a1:a4:1c:24:f8:c7:15:b3:ec:d4:84:57:9c:01:
4c:ef:34:ba:c1:3b:cb:ad:d4:b4:c7:cd:f7:7b:52:
a0:f9:9c:9c:a0:6f:03:7c:e7:99:93:9f:dd:1b:d8:
30:ec:f0:e9:65:69:8e:ae:17:61:b1:22:12:ae:89:
4f:33:1f:36:33:00:69:2e:01:b5:86:fa:02:c3:01:
24:28:c9:28:7f:18:cd:0a:9b:cf:30:5e:c8:0b:34:
fe:c6:63:52:59:51:7b:46:cf:74:f7:70:02:fe:c8:
30:cc:f8:a9:b4:79:e9:f7:ac:4e:ab:4e:dd:9c:00:
4a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38307
38858
sbgp-ipAddrBlock: critical
IPv4:
103.105.144.0/22
115.124.0.0/21
124.158.16.0/21
203.29.67.0/24
IPv6:
2401:8c00::/31
Signature Algorithm: sha256WithRSAEncryption
2c:2b:71:75:2b:e1:11:ee:37:7c:16:10:33:be:7b:bd:99:91:
6a:d6:34:1a:13:09:3a:ae:37:f6:db:17:d2:a5:ce:e3:b0:85:
88:f3:1e:f4:2a:fe:83:2c:0e:10:e0:6d:84:be:bf:33:68:9e:
f3:fc:68:b6:2d:19:1b:fb:0b:b4:d5:2f:01:74:67:eb:89:9a:
c5:98:7d:84:8a:a8:63:d5:23:38:d4:06:ce:a4:1e:77:8a:af:
15:61:6f:2b:dd:6a:49:00:b8:21:b9:da:d5:58:46:8c:c7:e0:
f1:77:19:2c:f0:bb:53:19:bd:18:25:a3:fe:94:c6:6a:e8:97:
7f:4c:80:31:08:fe:6b:50:16:58:5d:01:33:89:71:1e:dc:84:
82:7e:54:2b:ef:67:f9:ab:a5:04:53:c2:a0:db:9f:d4:5d:a5:
f1:06:c4:fa:f5:cd:f2:ea:59:84:a9:b1:8a:67:1a:85:2b:fb:
7e:61:12:68:21:f6:8f:ba:54:07:b7:e9:cc:b4:b5:85:d6:d4:
8e:d3:d3:e4:1e:63:56:3b:3b:e4:9b:cf:ce:4d:77:45:c0:e4:
95:48:04:0d:5f:73:a1:6f:da:18:39:51:a7:5c:f2:c7:e4:1b:
b5:bb:7f:57:22:35:01:eb:dd:e9:be:32:45:86:89:6a:5c:ae:
dd:82:0a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:15:29 2025 by rpki-client