Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer
File: Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer (raw, json)
Hash identifier: +zLaGy/3Z2sjFBcyJhSfhUAf/J685xwTyUgYLsQcu2U=
Subject key identifier: 56:0B:BD:60:06:CE:CD:73:00:D1:52:4C:8A:27:43:9A:BB:F1:59:7E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022312
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 17 Dec 2024 15:29:02 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 7486
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140050 (0x22312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 17 15:29:02 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A9171172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:65:5f:47:1d:da:b6:06:38:f6:b6:aa:64:
5c:0b:e6:35:78:36:a9:2c:1b:12:10:a9:54:d9:24:
b4:4e:c7:ee:40:bd:a1:46:e4:f0:72:a5:41:5d:e0:
ec:d9:1c:0f:8c:6f:8c:87:f5:e0:aa:0d:05:9e:f3:
b4:9d:e7:c7:71:99:c2:da:46:d7:4e:87:91:b1:87:
10:b2:e7:79:52:e6:a6:29:cb:b6:29:bb:5b:a9:a0:
96:02:2b:f3:2b:ba:32:75:2f:d6:f1:56:44:8a:91:
9c:df:61:15:22:8d:a9:33:98:1d:a7:78:98:5c:d1:
a3:09:e2:03:09:c4:12:b0:1e:5a:b0:a5:1f:b2:16:
68:19:b3:7e:e9:6e:e1:28:2e:9e:0c:87:4b:a3:15:
3f:97:15:08:4d:7f:fc:cb:7d:8f:23:71:b6:d6:cc:
42:d0:fa:10:a8:d3:52:63:68:32:df:a2:e2:d4:71:
8b:90:c3:2f:0c:a9:1b:70:c6:09:1b:c9:87:0a:a5:
e3:0d:d2:4e:a0:47:e5:92:1a:34:dc:39:b2:1e:2e:
97:3f:9b:27:b6:f5:c6:a7:2c:00:80:55:15:45:a3:
60:26:90:5f:b3:bd:23:67:ab:d6:45:2a:fd:e9:4c:
10:14:ee:52:ab:ef:4c:44:16:66:3a:89:75:ca:dc:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0B:BD:60:06:CE:CD:73:00:D1:52:4C:8A:27:43:9A:BB:F1:59:7E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7486
Signature Algorithm: sha256WithRSAEncryption
45:98:9d:45:db:7b:02:82:cc:f7:99:d7:e4:d6:6a:05:93:f2:
30:c3:85:1c:0a:d2:e5:f7:dd:6e:19:23:76:eb:cd:7a:f1:d5:
4c:e6:60:e6:12:e6:64:db:d9:9a:1b:ea:c0:7a:80:1f:54:86:
79:bb:97:d3:f8:1e:67:a7:36:ab:35:c9:15:49:c7:1d:d8:63:
1f:b5:4e:ce:c3:0a:79:1e:b5:5b:d5:f1:17:97:ba:7e:ed:f6:
3a:2f:27:ae:70:78:ba:fd:f4:2a:05:f5:0d:cb:d4:68:86:3a:
fb:f8:1a:3c:4f:24:76:5c:a5:ab:9a:b7:75:98:04:8a:8c:94:
87:ff:4e:ab:86:be:02:51:e1:c9:af:73:5f:3d:ca:6d:c0:30:
5e:b3:d6:e3:8f:8a:58:8d:b4:d5:fd:e1:1e:8a:a3:d9:57:7d:
da:21:ed:c6:da:9a:76:be:e6:c5:25:c6:45:14:d1:3a:d3:51:
5c:e6:7a:f6:cb:f9:d9:ce:eb:43:5e:19:32:55:ab:23:ad:a8:
13:c6:01:ea:de:f4:e4:74:1f:44:21:72:2b:4d:9a:29:9f:56:
97:c3:c7:00:58:79:a7:de:b6:03:a6:ba:12:e2:b7:22:31:27:
73:8a:dd:51:90:96:86:38:fa:93:f8:09:ef:91:a4:e7:d7:fe:
94:7b:55:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:09:06 2025 by rpki-client