Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
File: TK4677Gsir3bmbzO5PpakW0VezQ.cer (raw, json)
Hash identifier: MYQYfIuCM1Ye0ldZ3jUySHGwz6wWoGJd+BCNJKmwk6A=
Subject key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02234A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 18 Dec 2024 14:28:56 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 23750
AS: 55399
IP: 103.207.84.0/22
IP: 116.90.96.0/19
IP: 121.46.64.0/22
IP: 202.69.32.0/19
IP: 202.142.144.0/20
IP: 2406:ac00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140106 (0x2234a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 18 14:28:56 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91B5D7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:29:3f:aa:02:72:e6:15:0c:2e:97:d4:cc:
7f:89:ff:fb:04:87:39:09:81:f5:91:ef:c4:e2:57:
74:32:99:dd:b0:bc:61:a0:94:28:90:2a:96:00:53:
49:8a:82:91:e7:b6:f5:da:47:bd:81:ae:07:54:24:
95:bf:6d:d1:d5:bc:d7:d0:49:dc:4e:06:57:c2:87:
64:1c:58:4b:b7:28:6f:74:e2:f8:35:82:dc:5b:0d:
40:0b:11:66:1f:19:5d:f0:be:22:40:59:a6:bb:ca:
3b:95:53:29:f9:e0:b2:03:9d:32:93:0e:a2:49:16:
a7:1a:06:d0:17:b9:5c:f6:af:7b:69:30:4a:a2:24:
6f:b0:91:5a:8d:71:63:87:a1:16:bf:f2:56:bc:9d:
81:de:fb:cb:b8:24:01:63:78:4e:94:f4:fb:a6:9d:
22:3b:bf:69:fa:1c:c8:84:9c:8d:a9:8c:61:2e:1f:
2c:d5:e9:60:44:54:43:bc:9f:85:f8:f8:a6:62:f2:
b6:a6:6d:a1:a2:a5:24:aa:88:d2:30:fd:77:d8:96:
0e:f8:21:ef:95:a5:ba:05:1b:92:07:12:3e:71:f7:
0f:c7:2f:37:4d:9e:aa:7f:3f:bc:d6:f6:f3:c3:06:
45:7e:9b:d8:70:9c:a3:36:71:99:2b:80:6d:0f:ef:
6a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23750
55399
sbgp-ipAddrBlock: critical
IPv4:
103.207.84.0/22
116.90.96.0/19
121.46.64.0/22
202.69.32.0/19
202.142.144.0/20
IPv6:
2406:ac00::/32
Signature Algorithm: sha256WithRSAEncryption
7d:49:ba:bd:cf:cb:79:cf:07:93:ac:35:c4:e0:99:4e:8e:c7:
47:10:d4:d0:2d:23:db:5d:a1:1e:1c:d0:e7:e0:e6:0b:17:a5:
a6:43:2e:4e:12:d0:3c:03:5e:c8:60:39:cb:b3:12:4c:e3:83:
c8:b0:f4:22:3a:7c:f3:d2:cb:ba:74:e4:68:b0:11:9a:da:1f:
13:3e:37:01:dd:85:d4:ce:2a:1e:9a:10:ae:1e:40:b5:9a:83:
8b:aa:e8:0b:89:38:4e:21:e7:24:92:c0:45:e0:dc:e3:ae:c9:
d2:c3:17:5f:51:7b:a1:45:15:06:c4:b1:76:95:a5:20:77:9b:
98:79:b5:0e:01:41:c7:73:89:11:40:ef:eb:03:b4:c3:03:d0:
ee:c0:05:66:6b:4f:8e:0d:d5:ac:21:c9:66:d3:17:33:9a:f2:
c4:57:34:d9:65:2a:8c:25:34:2b:72:d8:81:ce:df:5e:d4:71:
8d:ad:eb:26:34:b7:0c:e1:27:64:5e:55:3b:0c:bb:2a:e1:41:
fc:a3:42:cf:49:76:b6:72:b6:5f:c0:e8:67:62:e8:39:aa:c0:
6c:6a:ca:88:53:bd:e3:cc:75:a5:b8:f3:36:f7:04:92:e7:8b:
49:7b:e4:51:fa:aa:06:89:a3:0b:d1:8a:b4:2c:03:a5:62:85:
ad:f6:85:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:13:31 2025 by rpki-client