Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer
File: VFxHwOQxMzjcm0QCwSuty06YV8E.cer (raw, json)
Hash identifier: M8Z0xWGfunKjATcbsoUL/aJMFY8biK4KrIqyXfoFfoY=
Subject key identifier: 54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022BB3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 27 Jan 2025 19:47:49 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 152138
IP: 210.87.68.0/23
IP: 2001:df3:3dc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142259 (0x22bb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 27 19:47:49 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91FB103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:11:7a:14:26:03:d4:53:b9:35:2b:52:2b:
df:96:12:ae:a8:83:6a:d5:b1:56:44:e8:ee:e9:a3:
35:dc:18:4e:4a:46:9f:89:aa:4b:1f:b1:2f:c1:fd:
04:b5:c0:2c:c5:8f:48:60:b4:5a:a1:9a:19:fb:15:
4e:1b:3d:ee:16:a3:0a:17:32:28:f3:19:81:65:c4:
87:83:ce:d9:19:1d:07:34:f5:e2:6a:db:28:b5:eb:
0a:3f:da:86:54:79:93:ca:49:ec:e9:e0:06:d7:26:
e9:db:82:71:11:60:d9:14:8f:9d:a8:63:a4:89:90:
e1:55:08:05:b8:6a:3d:26:85:27:bb:6d:e7:01:2e:
6e:69:c0:33:9c:70:68:1e:84:77:a9:a3:9c:00:e6:
1b:8b:71:88:42:79:e1:87:c3:fa:0d:39:c3:b9:80:
53:df:a5:93:e2:3d:3c:04:df:89:73:f1:a1:21:72:
1f:98:af:e3:d0:36:2e:32:aa:2e:74:66:55:5d:37:
21:ee:2c:90:53:7e:c3:36:de:48:a4:e1:ae:8a:bb:
3b:aa:2b:90:e7:a7:e1:e6:c5:80:4d:62:4d:36:73:
0f:9d:83:1b:ef:04:0b:e8:3e:6f:74:23:6c:62:b1:
da:78:98:3a:72:f0:c4:2f:4f:0f:c5:67:7c:2c:30:
47:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152138
sbgp-ipAddrBlock: critical
IPv4:
210.87.68.0/23
IPv6:
2001:df3:3dc0::/48
Signature Algorithm: sha256WithRSAEncryption
b9:be:a3:ee:08:e3:f5:5b:a7:c5:f5:3d:1e:76:93:42:58:17:
e2:91:b7:d7:69:8c:f1:1a:f0:40:fd:31:55:cd:9a:20:4c:79:
04:e4:50:25:f7:bc:ed:06:82:6b:e3:27:c8:60:e7:62:4a:53:
eb:a5:9e:3c:dc:89:25:27:f0:39:94:6d:4c:c6:45:5d:9b:e2:
1d:88:22:1f:f2:ae:cf:70:22:de:45:7b:f2:fc:04:a2:d7:8b:
85:34:90:c4:56:24:d2:b7:59:2f:59:45:38:f3:bf:da:93:87:
74:1d:84:c8:e2:43:9b:f1:5e:4f:bb:fd:8d:ac:f8:ef:fb:ad:
31:2b:a5:d7:61:e2:63:63:ef:e5:d6:f0:e1:3b:a1:92:35:c7:
93:2d:b9:84:e7:bd:8e:87:03:9a:ad:d7:83:a8:c2:84:a5:c6:
89:90:ed:2f:1a:3f:94:7f:ab:2a:46:58:48:f1:ad:df:de:a9:
70:7c:7d:6f:5a:0f:4f:e8:12:af:d1:55:48:c7:5d:13:87:56:
a8:40:66:d3:54:ee:7b:c6:7a:9d:a3:4d:b9:f4:6d:32:5b:61:
fd:59:62:58:fb:ac:7d:fd:05:63:66:40:49:90:03:7b:76:f8:
71:9e:31:c2:b6:d3:3b:78:19:ba:5d:fb:92:7c:d3:34:d0:b9:
2f:fc:13:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:17:35 2025 by rpki-client