Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer
File: V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer (raw, json)
Hash identifier: /GkYNCe+/niUnrLi0Zjsit59dou3GkhstAXxoMYl1eg=
Subject key identifier: 57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0230B9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 12 Feb 2025 18:53:33 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 138506
IP: 103.127.90.0/24
IP: 103.152.8.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143545 (0x230b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 12 18:53:33 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91B7A3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:51:77:d8:71:42:60:cd:1a:ad:36:bd:d3:7c:
30:3e:95:7b:fe:1c:ef:af:66:72:cf:c5:f3:4b:d5:
8f:35:4c:7f:20:36:7e:60:c6:f1:85:49:9c:67:ac:
10:a7:04:b8:d9:8b:15:29:7f:f5:b3:c3:a6:23:f9:
76:cf:cb:6a:82:c8:e3:86:cb:7e:86:97:0d:17:f8:
9a:e4:c0:3a:27:80:76:a8:d4:ae:6c:9c:64:98:44:
9e:13:fe:58:3e:29:0f:50:8c:b1:8e:e4:bf:67:81:
ac:4c:b6:3a:6f:2e:f3:ec:dd:cc:4a:3b:70:f6:07:
1b:4a:f8:38:58:fd:bd:53:9a:69:fe:3d:47:84:5b:
17:c7:0a:00:46:67:24:57:9c:3c:7f:6e:76:32:b6:
af:10:10:1c:55:c4:cf:86:e2:54:0a:e9:bd:0f:f8:
59:45:c5:76:61:bf:96:13:aa:32:cf:de:c4:40:e4:
8f:e4:16:98:5d:76:96:2a:2d:37:53:3c:c3:1d:a6:
17:a9:ef:9a:91:76:c8:49:b9:e0:28:d1:c4:31:54:
39:20:5d:73:51:b3:08:7c:fe:16:0e:82:3e:21:d8:
39:92:2c:56:2f:03:e5:db:43:6d:db:e5:fa:56:ae:
c8:5a:bc:64:d6:5a:21:5e:d9:9a:74:75:8b:8d:c6:
93:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138506
sbgp-ipAddrBlock: critical
IPv4:
103.127.90.0/24
103.152.8.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e1:dc:c6:00:ee:48:af:5e:f6:30:87:74:dc:ce:fb:fa:68:
f9:2c:e2:7e:85:18:7b:8d:fb:81:5a:05:13:50:58:83:22:47:
ab:cc:f8:7d:d0:69:68:e5:00:8d:7d:fa:51:d4:ff:c6:1e:4b:
8c:d7:32:fb:8b:c0:b5:02:9c:6c:6d:e1:7f:20:3f:9b:43:4d:
c2:3a:99:da:7b:a6:56:a5:ae:ce:14:25:a8:fd:61:95:4a:b6:
d4:db:d8:9a:57:ed:d8:9d:bd:a7:e9:eb:25:72:80:c1:2b:04:
8f:4d:f8:0a:3c:25:5f:a8:c3:4a:4b:dc:10:5d:fc:65:81:fd:
3b:10:63:e0:5b:04:d5:8d:12:83:c4:75:b8:71:b0:dd:5d:82:
ab:68:57:dd:de:d6:a8:be:1f:e8:f4:28:0a:13:bd:81:08:83:
32:31:46:d9:7d:3c:18:7e:66:b2:a8:c2:7c:61:95:c8:4a:25:
4f:78:b2:ff:51:47:3d:2a:4d:89:b7:13:f6:c0:89:7c:ba:f9:
71:3b:fe:2b:12:26:e5:93:25:09:d4:88:31:54:3c:7e:72:b7:
a2:77:cf:0f:e3:f9:49:00:f2:7a:d6:39:cd:af:35:65:10:a6:
90:d7:fe:b0:f0:86:ed:d8:6f:9c:0f:b9:e8:cd:85:5a:39:5c:
24:1d:e8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:33:52 2025 by rpki-client