Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer
File: S9XCMYZ-JzlRVcAceEizsByGBvI.cer (raw, json)
Hash identifier: pXxx3RRrlIrIJlJOFRt3XTQQwpWAR2a3Du6e01tPK80=
Subject key identifier: 4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023027
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 10 Feb 2025 14:04:46 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 149491
IP: 103.181.24.0/23
IP: 2400:5760::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143399 (0x23027)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 10 14:04:46 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A914BBE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b3:c3:13:56:8f:3e:19:b9:4a:e3:85:2f:45:
31:c5:13:04:f0:a8:a9:e5:9c:dc:4e:ce:a6:92:0d:
5e:e5:23:0c:69:59:7c:1e:ee:bd:d7:7d:87:2d:33:
2a:fb:2d:a5:01:b3:60:e0:00:ca:bb:c1:b2:aa:e9:
89:b9:2e:c1:de:cc:51:5a:2d:b9:d2:9a:b6:ef:da:
21:d4:ad:2c:c4:2a:0a:ac:3b:14:4f:f7:3c:a7:af:
9d:23:5c:2c:29:5b:03:d8:01:ee:e1:a0:d8:88:1f:
08:d9:fd:e2:32:e1:a1:c4:68:ea:6b:b0:ae:5b:e5:
4d:2c:7e:4f:ca:27:20:d3:b9:0f:70:a4:de:d1:13:
dd:a7:2f:4f:de:91:7f:e3:51:d1:cf:86:85:92:59:
f4:e3:b4:b6:c5:67:09:18:f7:4d:56:31:34:3b:13:
73:b4:b2:be:5c:c4:f9:ad:cc:fe:e3:55:e2:c9:72:
35:ed:64:9c:9a:c3:f3:de:fe:32:9e:db:e3:b5:d3:
f7:78:04:f8:b2:c1:da:01:84:f4:26:c3:4b:7b:01:
98:78:4c:2b:88:17:08:30:c4:5b:8c:a6:fb:75:e1:
1f:f3:cd:23:54:1e:4f:63:0c:76:ec:30:f0:9d:a7:
62:c3:2e:da:48:40:be:73:db:d8:1f:29:cf:b2:51:
13:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149491
sbgp-ipAddrBlock: critical
IPv4:
103.181.24.0/23
IPv6:
2400:5760::/32
Signature Algorithm: sha256WithRSAEncryption
93:e2:7f:7f:98:cf:bc:bc:6f:11:80:c8:2a:24:20:03:0a:8b:
3f:f2:fc:45:38:ca:7e:3e:8d:e3:4a:d7:ad:a4:01:b2:3d:35:
ee:74:16:f4:f5:69:a9:8a:26:07:89:c7:ab:62:db:b5:e7:19:
83:36:0d:c0:82:77:bf:87:f7:ca:03:87:6c:c3:5d:02:a2:bc:
43:34:cc:06:6b:ba:11:b0:74:22:2d:b2:e6:97:e0:8e:65:b9:
6c:32:20:21:79:3d:14:b5:6e:ec:a8:3b:38:9a:0e:1d:45:4a:
b1:f3:bc:40:8e:08:e8:ea:42:d3:d8:1a:a3:1a:57:81:7a:a7:
bd:ab:1a:d4:46:cc:72:e3:b0:18:72:f3:27:8b:af:a3:6a:ba:
69:6e:64:54:94:fd:17:30:92:8e:70:a2:3f:e3:0d:f1:ee:a2:
f9:bf:af:ff:4b:05:99:3f:98:2c:e5:ba:5a:45:48:e6:ae:52:
e2:bd:f7:4e:ab:68:25:90:ed:a7:01:9b:42:3e:b0:dd:48:45:
79:ae:92:58:49:88:8b:ca:94:dc:36:c5:90:64:e8:73:2e:a9:
5b:9d:d6:03:5a:c5:4b:50:34:ac:8b:95:3c:55:e6:2a:3f:0a:
61:43:8c:f9:e0:cf:b0:62:97:7f:be:c9:d4:81:eb:9d:6c:08:
b4:03:91:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:10:10 2025 by rpki-client