Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer
File: Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer (raw, json)
Hash identifier: //iHoNu6ziHRiNdvAscOe+3gRXxVlGQp0DVI7+5iM1A=
Subject key identifier: 41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0223C7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 20 Dec 2024 13:58:32 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 7603
IP: 103.176.196.0/23
IP: 2001:df0:22c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140231 (0x223c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 20 13:58:32 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A913D6C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:34:29:5e:87:84:92:21:13:1f:29:9a:64:
0a:77:b9:42:93:86:bb:20:1e:33:fe:7a:58:fe:7c:
7e:b9:9e:67:ac:9e:3e:6a:8d:40:66:6b:72:e4:44:
64:47:b6:6e:ab:a6:65:29:29:91:03:60:b0:68:5e:
a4:6d:61:14:0f:3c:0e:8f:bd:01:23:b3:9f:aa:f1:
30:59:0a:f7:91:63:a2:f4:6d:8e:ac:66:71:87:10:
a6:20:8e:4f:22:85:b4:ee:c7:32:22:54:58:24:cc:
59:1d:49:17:cd:ff:b8:fb:c4:84:0e:e0:a2:2e:3b:
22:00:69:88:af:e6:11:8d:27:da:1b:ac:85:29:ea:
ac:37:b7:ff:9e:24:49:b1:f6:35:7e:90:f5:a3:2b:
98:3a:95:7c:f4:06:b6:9e:64:f3:bb:81:cc:bc:24:
05:fd:2f:90:c3:be:8f:ac:8b:1d:c7:7f:fd:49:22:
9d:09:54:6a:e7:50:a5:f1:82:04:f8:de:89:5d:9c:
9e:3c:cf:a7:b0:99:cd:01:36:4d:1b:f4:3d:af:53:
4c:be:9a:3a:a8:fa:9f:cb:6c:29:8d:6c:c8:ea:b2:
50:95:d1:ff:c5:09:df:01:1d:f3:7e:26:5f:28:a6:
10:82:92:25:6b:0a:f4:c6:e1:0d:dc:bf:a1:eb:70:
5f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7603
sbgp-ipAddrBlock: critical
IPv4:
103.176.196.0/23
IPv6:
2001:df0:22c0::/48
Signature Algorithm: sha256WithRSAEncryption
83:24:14:df:ec:e3:3b:80:9c:cb:2b:43:76:9f:ea:89:70:30:
d4:2c:74:dc:30:c7:37:99:42:52:53:c2:b1:bc:b6:cb:17:7b:
35:da:d4:b5:be:3e:0b:cb:29:66:36:9e:c7:bb:be:bb:b9:9b:
f3:1b:11:68:91:48:20:ff:8b:df:36:3a:34:ff:a1:42:53:9d:
fa:ea:e2:aa:03:9f:64:67:5e:81:e4:82:ca:79:c1:9e:af:ae:
8b:9e:92:98:eb:df:d2:62:3d:78:4e:d5:ed:1b:26:c9:57:b2:
a6:d4:11:d4:63:de:98:05:51:02:54:9e:3f:7e:7a:6a:96:5c:
36:03:37:f6:13:0d:7e:d9:2f:8a:94:28:a3:34:dd:b1:c9:bc:
c0:b0:84:58:a2:d2:42:0c:2f:df:e1:4d:1a:6b:6b:06:0e:77:
3f:39:26:00:2a:13:e9:cf:00:30:4b:f1:76:ec:3d:be:30:6b:
43:04:08:99:6f:63:ca:09:78:f2:32:e4:96:8f:4c:c1:49:7a:
3f:85:ae:8d:88:b3:38:65:1c:15:5e:9e:9c:ae:92:e0:30:87:
da:ff:e0:4d:03:f4:21:7c:63:66:41:b9:de:82:a4:ca:01:bd:
16:f5:f9:ef:0d:91:56:29:a7:2e:ac:2c:36:b4:1b:a7:f9:eb:
54:10:9a:40
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:03:39 2025 by rpki-client