Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer
File: TKAS9bToBGfvDuxPjAJEoj1WmbU.cer (raw, json)
Hash identifier: 1LNA9vWg457+GbzbSNshVccO1AV6rlR+Xbw/qisZfXU=
Subject key identifier: 4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022832
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Jan 2025 19:20:27 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 152312
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141362 (0x22832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 8 19:20:27 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91B1E8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c8:d8:45:17:6d:86:4c:96:31:06:bd:0a:e6:
d8:55:1b:8e:7b:58:9e:99:41:d7:75:82:1c:3a:a1:
f7:78:19:38:99:5f:2d:89:67:c8:ce:79:f8:84:5a:
e9:09:55:cc:e6:d4:97:5d:16:3c:69:54:73:b1:7e:
64:e9:07:4e:a1:e2:55:ce:da:60:f4:f2:89:4f:08:
36:b6:9b:9b:bf:fc:17:51:91:99:88:bf:d8:da:f6:
aa:be:42:ad:58:3f:b9:68:95:53:35:6f:ed:15:1a:
17:b1:3e:4e:0c:2a:45:6c:2f:3f:ec:c2:28:b0:62:
dc:52:37:65:01:3f:e1:4b:2b:ca:8e:14:fe:2e:cb:
09:66:c2:ac:20:40:bc:12:a6:8a:04:e7:02:4f:6b:
9d:69:48:e2:8e:3e:32:7e:26:cd:a7:1d:ac:5a:8f:
f5:d0:03:59:a0:16:e0:7c:63:cb:08:30:71:b4:9d:
c4:f1:08:1c:5d:f1:70:1b:2a:aa:a4:e3:6a:37:0f:
55:c4:93:43:f1:35:f8:41:68:d7:ae:82:f5:f7:5c:
38:df:95:7f:89:df:7c:7a:56:82:1f:0b:da:09:d5:
e6:9c:e1:d8:b5:b9:41:79:4e:1a:67:75:2b:33:8b:
7d:1a:57:e7:50:46:ed:27:5a:2c:2e:04:b2:85:eb:
b1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152312
Signature Algorithm: sha256WithRSAEncryption
0b:00:e4:dd:32:85:17:c2:11:e7:a7:75:88:e4:6a:fe:b0:79:
ae:04:2b:c5:08:dc:0d:87:d4:0b:40:fd:5d:58:e3:7b:f0:ff:
32:08:c7:60:86:cb:2e:c8:c2:ca:ea:a9:e1:8a:fe:02:01:15:
07:cb:7d:13:82:ef:9a:1e:58:d5:d3:4a:8d:14:53:51:61:46:
f8:3a:36:37:e3:9e:2d:9d:bb:65:c6:63:da:9f:2c:27:40:65:
0c:e5:5b:55:6b:8d:7d:ed:ac:0e:fe:9e:b4:64:2f:df:9c:4f:
73:b4:00:66:15:69:73:f7:bc:b4:75:0c:1d:4e:6d:0f:9d:fb:
39:08:8d:51:d1:1d:3b:c0:3c:c6:d1:6d:49:3a:31:f4:a6:6b:
ce:64:b5:8f:d2:27:25:b1:d1:9f:fc:4d:e7:e6:8e:f4:12:a4:
5b:91:fa:f2:3c:e4:3c:07:1a:4f:1e:82:9e:ec:8d:5d:df:33:
46:e6:40:b1:83:69:ca:60:75:15:38:f0:96:d3:7e:e2:fc:30:
d4:7e:79:ef:5c:bb:30:c9:59:1e:98:17:de:5c:ac:dc:e2:40:
18:5f:54:70:67:f1:36:fd:92:02:c4:58:ba:5b:19:b0:9a:5d:
5a:3f:5e:29:ac:46:aa:a8:0e:0e:57:22:a2:0b:a5:04:56:d3:
9e:b8:83:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:55:58 2025 by rpki-client