Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer
File: T-09NyGnirIEhs2vNKOuaRfYfL4.cer (raw, json)
Hash identifier: Nm0vztH96kCptlxvpxX1OxZRNqssiFjYUklHwcXRpEg=
Subject key identifier: 4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022BF4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 28 Jan 2025 18:09:30 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 137257
IP: 103.106.64.0/23
IP: 2402:3cc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 17:46:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142324 (0x22bf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 28 18:09:30 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91D8F57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:82:2f:44:67:50:91:b6:9b:48:a2:00:d5:bf:
e6:7b:ec:80:74:24:ba:6a:3c:27:22:14:e3:6f:06:
14:9f:f9:fb:40:27:76:49:98:a8:aa:8a:bb:17:a4:
f9:b6:11:13:5f:d7:ce:04:26:18:ef:1f:48:da:c2:
e4:23:3f:a4:74:6a:de:a6:22:27:12:ea:03:17:dc:
19:c0:e0:46:a7:4a:e3:04:90:89:2e:65:ae:f9:ff:
b7:9c:fb:74:a2:7c:2f:be:05:ac:ef:bb:22:66:21:
27:bd:4f:88:27:d1:d2:42:26:ba:45:f5:3d:d2:bb:
86:95:21:0e:ba:3e:72:08:16:2b:86:26:48:85:c4:
cc:9b:48:71:3a:8d:fe:92:53:05:0e:7c:4c:a6:79:
22:8e:c9:63:68:42:a1:89:ef:32:6a:d6:58:58:1c:
c9:d9:ef:42:28:dc:19:9a:28:26:c1:b6:ba:a7:0c:
c8:fe:0f:a5:b5:df:d0:b2:60:6a:39:d0:b1:ba:e8:
dd:98:81:a8:f2:f0:71:0b:85:3c:b6:66:b3:20:05:
72:25:50:fc:73:38:41:47:79:34:68:96:a8:49:cb:
ac:3d:64:5e:2b:14:4d:9b:e1:e7:49:3b:b7:58:0f:
38:c8:e8:30:82:44:6d:25:f3:59:5f:ca:95:38:e2:
8f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137257
sbgp-ipAddrBlock: critical
IPv4:
103.106.64.0/23
IPv6:
2402:3cc0::/32
Signature Algorithm: sha256WithRSAEncryption
cc:f2:60:86:0f:e9:9f:eb:4f:02:53:ad:70:6e:ce:30:d5:ef:
27:ba:38:8d:01:83:02:b2:25:5c:19:28:a4:2b:e1:de:bc:a8:
58:4e:0d:78:e7:a7:81:85:c0:c5:54:87:5c:6c:44:63:2d:76:
51:30:10:01:d2:da:af:40:19:a1:25:b4:b5:d8:d8:b5:10:79:
f6:f6:cb:07:73:97:c2:61:7a:cf:b6:86:64:7f:d3:25:00:81:
17:a2:e1:70:94:f8:94:f8:c3:0b:d6:41:d6:b3:57:27:dc:d5:
9f:77:09:40:2c:6d:6e:6e:a3:0b:e7:ae:dc:28:c3:f7:e7:7f:
13:cc:e1:9b:83:db:43:82:f9:90:00:aa:4a:38:2c:7e:73:47:
56:e9:c3:ff:2e:a1:b6:a7:c7:13:a0:3c:d4:cd:ef:60:54:22:
f9:10:df:3b:12:5d:4c:52:55:bb:6a:5d:29:37:65:e8:bb:a1:
31:6b:42:0d:62:d5:a3:9f:16:2c:7e:b7:82:b7:f6:83:a0:d7:
eb:81:8c:c3:81:95:f8:c2:c5:b4:e4:a1:6d:57:9e:b3:2b:4a:
7f:85:6f:18:45:7e:21:51:c3:23:f5:3a:4b:1d:02:db:a6:dc:
f0:6a:fd:ea:d6:8b:21:8b:b1:9a:a3:66:22:95:63:2d:57:74:
68:d0:f0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:22:59 2025 by rpki-client