Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer
File: V9tCq56777_iEHP1AH_Ddixfuwg.cer (raw, json)
Hash identifier: 6EFzgDBFlh0MP7wkYSWiYdqS9Bo24QJB1/CwakcUajs=
Subject key identifier: 57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022E41
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 02 Feb 2025 20:32:08 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 103.224.252.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142913 (0x22e41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 2 20:32:08 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91CA297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:82:1e:96:58:b0:c1:2b:12:80:09:5d:56:
d6:e6:0d:35:7d:19:c3:fe:fb:33:b0:96:7f:43:e7:
8a:cb:f8:d0:f5:85:b9:4a:a0:4d:c3:55:f6:b6:05:
88:80:0c:8c:5a:13:49:89:94:aa:67:de:b4:84:87:
91:90:70:6e:83:2f:d0:b5:70:b2:c7:74:af:c6:df:
67:37:4a:c7:8a:d4:40:d3:b0:90:20:5f:db:f7:89:
47:e0:7d:51:90:65:51:d8:2f:c0:32:5b:05:c5:0c:
f7:a1:60:1f:b3:e4:fa:2e:a5:97:ac:9b:53:00:17:
6c:77:67:7e:f9:e3:32:95:05:d4:e9:be:f9:5e:23:
66:2f:cc:db:d6:31:4b:c2:57:37:81:54:3a:e4:b6:
9e:0b:3d:44:b5:77:ba:ef:f8:34:94:90:c2:9d:a1:
d0:03:fb:20:fe:a9:c8:7f:40:1a:1a:cf:72:34:f5:
e7:0a:26:e6:0e:77:e6:1d:56:1a:fb:e0:2f:31:11:
c1:79:d0:3f:c5:41:7b:d5:a5:f5:b7:e1:bb:7c:e8:
cc:ba:8b:f2:77:d1:57:56:81:f6:2c:51:f0:8d:63:
fe:98:78:08:96:9f:b6:e8:48:ec:85:3f:99:63:9f:
5b:b6:26:d7:89:5d:3d:cd:d8:c5:87:2a:02:fa:c6:
88:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.252.0/22
Signature Algorithm: sha256WithRSAEncryption
66:bf:57:67:0b:c6:36:e9:29:10:74:d6:b4:cb:e1:90:3e:54:
51:1a:80:cd:d5:b0:c7:16:2b:ac:ca:6e:93:09:d3:10:f1:c8:
02:1a:46:a6:bb:9d:9e:c8:56:8d:c5:a3:fe:4c:97:6a:54:44:
6d:34:de:02:34:82:12:f0:f9:49:1d:b2:c6:55:6b:5c:b3:e1:
81:32:fa:1b:c8:13:d9:a6:c3:72:60:b6:c7:53:c0:ca:89:27:
73:aa:eb:5b:e9:86:a1:7e:29:cf:45:3e:3e:d6:d4:4f:0b:57:
48:cc:6e:99:d5:e5:7e:92:d5:a9:a7:f1:76:7c:6e:a2:52:d0:
41:b3:b7:14:6b:cf:df:7d:dd:1e:38:70:87:b5:c9:e7:29:04:
19:8c:00:14:90:2a:74:58:81:ff:57:26:90:84:29:a1:2f:d0:
d1:03:54:99:ec:8f:ef:a1:66:1b:a5:c3:a9:15:68:5e:3a:08:
68:5b:66:17:26:ea:9b:bd:1e:1a:d1:61:54:26:86:07:70:3d:
3f:74:d8:61:fb:ae:9a:d8:0e:a1:c9:0f:dd:9b:a5:25:9d:d5:
77:2b:f7:4e:ad:d0:88:70:49:2b:2f:4e:5b:db:fd:f2:10:c2:
8e:cb:0e:60:e4:c3:1e:e2:6b:80:77:60:38:79:a2:62:a1:4c:
a1:b1:5d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:39:58 2025 by rpki-client