Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
File: THDgIDLqWcKv1UGhhw10sEDRtqI.cer (raw, json)
Hash identifier: n61+qXvXczSjlvJSyofKzZ/3Bkoz706rsrEWU/hRZDI=
Subject key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022FA9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 06 Feb 2025 18:51:12 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 45599
IP: 103.10.204.0/22
IP: 112.78.104.0/21
IP: 160.19.52.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 14:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143273 (0x22fa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 6 18:51:12 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91D615F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f1:b5:40:0d:64:ef:75:4a:ba:2e:cd:15:5d:
7e:55:6b:78:fc:03:4e:bf:f9:9f:81:1a:e6:97:91:
d5:d2:47:b3:2b:d7:33:fa:50:73:b7:22:05:33:d9:
05:64:2e:8e:45:6f:f4:85:b2:24:08:84:bc:4c:ff:
f1:03:32:45:3c:fe:4e:92:b9:41:5b:49:52:d2:a1:
30:e6:3d:0c:4c:28:ec:73:b7:96:ba:bf:c4:7b:a4:
c3:6f:a7:71:0b:73:0a:b5:e5:ec:b6:4b:1d:e7:aa:
18:6d:61:91:a4:75:1b:40:1f:29:06:c8:b8:55:2e:
11:ac:91:b3:67:e8:72:0d:c9:5d:66:5d:ee:bf:f2:
7c:8f:a4:b9:49:17:84:52:73:80:90:d1:b5:0b:d7:
85:c3:08:86:5f:2d:57:0d:40:d3:77:95:60:f9:e6:
33:f8:a5:95:6a:8a:89:cf:84:86:de:b1:78:31:56:
25:ba:98:9b:61:a5:46:d0:04:d7:be:d6:8e:53:02:
bb:c1:9d:d9:22:98:26:9b:c4:70:76:00:09:41:a2:
93:bb:fb:b8:c6:12:64:ad:5f:2c:64:1d:b3:dc:88:
0f:48:7f:38:92:59:17:56:22:73:1c:67:12:27:bb:
fb:33:de:ed:fa:2a:47:45:0e:e7:31:36:21:88:20:
38:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45599
sbgp-ipAddrBlock: critical
IPv4:
103.10.204.0/22
112.78.104.0/21
160.19.52.0/22
Signature Algorithm: sha256WithRSAEncryption
75:da:a3:1a:98:dc:39:5a:ac:ff:f6:ef:3f:d1:f5:7e:38:ff:
19:b8:a8:5f:25:7e:42:0e:1a:f6:be:83:13:94:0e:e5:cf:cc:
b1:ca:49:af:a6:6d:8c:b9:59:29:7a:9d:e7:20:6e:f3:9d:94:
77:4e:2c:d9:ec:c8:83:e5:fe:d5:01:19:e5:9e:d9:8c:45:f7:
49:88:0c:eb:f2:75:f4:b1:f7:43:71:92:9f:e1:eb:48:cc:bd:
da:cf:56:b7:7a:ee:c9:d9:b0:75:10:b5:c0:b1:59:9c:97:75:
72:bc:dc:e3:f1:f4:cf:d4:60:67:49:d7:0b:0a:49:9c:10:d4:
64:97:1f:a5:a7:64:b0:f4:bc:d6:39:d5:da:3b:0f:29:e2:de:
18:0a:d2:6c:0d:06:3e:16:95:80:45:63:19:b9:a3:6f:8e:5e:
fd:6b:b6:98:9b:6d:3d:7d:73:72:2e:98:e6:70:3b:d2:7e:14:
9a:b5:a3:6b:4b:fa:18:06:85:87:67:cd:b4:a6:13:5a:e8:33:
ea:89:3e:7a:ab:85:fe:1b:c2:41:ce:6e:f4:2a:56:56:b5:a5:
ea:b5:20:26:58:0e:be:14:83:74:00:96:3d:cb:ce:81:bb:af:
60:09:e6:ea:4a:c3:26:c4:b9:24:de:f0:b2:fb:66:ea:a9:a4:
41:bc:48:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:27:51 2025 by rpki-client