Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer
File: QcEdgay69pPnrWH6EU53uf1PV8M.cer (raw, json)
Hash identifier: 25HnAf8+TVMyMkamOYNDJ8FU2QSvz9/SMGLNxMBSShs=
Subject key identifier: 41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0224C1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 25 Dec 2024 13:24:19 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 103.147.232.0/23
IP: 2001:df2:aa80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140481 (0x224c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 25 13:24:19 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A9147EA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:8d:a0:4f:1f:bd:4b:66:f6:2e:80:72:92:
42:19:48:09:2e:6d:24:57:c5:63:6c:ca:c2:a5:8d:
e9:d5:56:a7:20:56:b7:50:2f:61:82:44:5a:2f:fc:
47:d9:61:c8:50:ae:d3:43:15:41:78:06:56:c4:0d:
43:fa:22:e3:89:1c:19:19:39:ca:94:71:e5:cd:c6:
80:7d:5d:7e:44:1f:79:ae:53:3a:a2:11:f8:fc:19:
5b:cf:ea:41:48:42:d0:0d:b3:0f:98:b9:20:71:b5:
43:c7:d5:d9:ef:4e:f0:af:dc:e3:3f:8f:bc:8f:1c:
93:bb:78:fe:f2:dd:10:38:63:2b:07:82:cf:b8:a0:
cc:cc:de:f1:64:4f:54:63:d0:2d:6e:05:60:a7:6d:
47:36:0e:77:ac:60:49:61:f9:7d:32:ec:a5:d5:2e:
02:8c:83:07:00:72:eb:6a:62:16:8d:06:cc:da:86:
b7:50:22:81:f0:b8:9e:d3:6b:65:15:04:47:30:18:
d1:7b:98:7a:50:4b:16:c4:f0:30:8f:fd:6a:dc:66:
19:e0:3f:9d:f8:13:aa:32:d4:ca:fd:d2:e1:6a:cb:
0e:51:b4:f0:8e:de:5b:d0:99:21:fa:aa:55:23:6d:
bb:ab:7f:d0:71:71:13:83:5a:54:da:85:a0:63:fd:
a4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.147.232.0/23
IPv6:
2001:df2:aa80::/48
Signature Algorithm: sha256WithRSAEncryption
d2:c1:06:fd:c2:37:2e:1b:3d:c1:0d:c3:8a:3e:d9:d1:5f:d9:
b7:12:66:a4:b9:10:25:0b:e1:5e:9e:6d:a7:66:04:26:3c:86:
57:87:06:c1:59:03:17:94:38:a9:70:55:a9:1f:f4:68:48:5f:
5f:f3:11:79:2c:a0:c1:d8:d5:1d:04:0e:17:76:05:6a:be:ac:
81:3e:c7:01:31:0f:46:fd:07:d6:2a:88:61:ea:ec:7c:aa:2a:
19:f9:a8:81:67:9e:dc:c1:d1:43:45:3a:37:c5:db:22:ef:ac:
af:fd:d8:8c:ed:53:c3:36:3f:f2:10:75:fe:46:eb:b7:7c:f5:
3e:11:b6:9b:af:67:44:6c:97:f4:30:f5:e4:2c:c7:88:f5:b0:
44:72:13:03:df:6b:e5:cc:34:cc:e3:6b:ed:db:b2:ec:c9:fd:
71:8b:1f:0f:fd:65:6c:1a:b5:dd:71:dd:de:e3:95:c3:9d:7b:
de:99:b7:c2:82:04:6e:27:de:de:a9:a4:1a:d3:0e:cc:bf:bd:
36:a1:95:ed:a1:81:84:69:a8:5e:03:89:57:71:d5:5f:69:c6:
7f:91:7a:f5:91:d0:4c:23:0d:21:5a:dc:f4:a9:98:81:2b:ba:
0e:79:5c:8d:c4:b6:29:d9:f5:3a:7b:0d:ac:f1:1e:2f:61:51:
3f:f2:06:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:14:25 2025 by rpki-client