Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer
File: WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer (raw, json)
Hash identifier: OkN1pAdxyG5Y8OCu2k6oz/5NWJ6zt7AhnueBZwU7DQE=
Subject key identifier: 58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021DE7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 27 Nov 2024 13:17:43 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 59210
AS: 136899
AS: 152879
IP: 103.243.172.0/22
IP: 2401:bc40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138727 (0x21de7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 27 13:17:43 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A912C72C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:0b:65:26:e0:8c:70:5e:61:f6:71:ce:a1:
aa:50:5b:ca:76:af:f6:46:9b:e1:03:4d:92:97:b1:
2d:a0:a9:0c:4f:6c:cd:1f:7f:d7:bf:ea:4b:2c:b3:
fb:1d:45:fc:61:72:47:67:42:75:2f:53:b6:d4:d7:
b2:6e:cd:1a:fe:fa:11:50:13:35:5e:6c:d0:b0:ff:
40:10:c6:22:10:f2:f8:a2:bc:bf:f9:2d:90:09:aa:
12:72:5d:b2:df:19:e1:7b:9a:d0:07:42:b2:1b:1a:
8c:7c:02:ec:39:51:32:67:a1:d4:cd:f1:fc:95:5e:
de:4f:04:34:ff:44:99:c1:be:19:61:03:9c:67:4f:
6d:cf:df:45:b0:35:e4:2a:8f:26:3d:34:84:6c:4d:
e9:68:48:7a:2d:f6:e7:47:15:97:34:80:42:77:da:
49:cc:f0:4f:a9:7b:1e:4d:06:5f:e2:ee:b0:7d:f1:
c8:d8:a2:a1:2a:b5:a7:97:8b:80:01:4e:b3:d8:21:
18:ca:60:cf:c9:01:e8:ee:ec:32:99:79:ac:fb:7f:
2d:d2:42:6e:e8:ee:2f:47:7e:ac:83:0b:f4:7f:1e:
69:f3:b1:8a:ca:a1:fd:71:c0:9f:64:23:33:99:49:
8c:20:06:98:0b:ae:95:e7:90:29:6e:8d:c3:58:45:
27:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59210
136899
152879
sbgp-ipAddrBlock: critical
IPv4:
103.243.172.0/22
IPv6:
2401:bc40::/32
Signature Algorithm: sha256WithRSAEncryption
59:46:16:29:51:c6:d6:23:41:71:e9:1a:35:6c:f2:41:6c:cf:
4a:cb:c0:4a:ef:9b:53:cd:01:0d:2c:32:44:79:21:fb:f4:87:
d6:bc:ce:e8:da:07:96:54:f4:30:f9:3c:6d:4e:f1:0a:84:f2:
0d:ab:e0:e0:d3:24:87:58:14:76:6c:5e:2d:e7:35:cf:bc:b6:
03:bd:4b:2e:e9:62:1d:49:31:18:05:ee:80:a9:ed:03:a1:38:
04:21:60:5f:0b:8c:0d:e7:b3:8b:6a:d2:2d:32:d1:0f:2a:3e:
ba:f8:4e:36:35:77:50:7a:93:29:ab:a7:eb:89:c8:b5:be:33:
e6:70:da:19:a0:8d:8f:9b:28:b8:73:6f:03:0b:41:2e:fc:36:
df:68:78:82:d6:95:da:8d:42:ca:5b:ba:5a:33:22:66:e3:67:
2e:6a:4c:c4:3b:30:86:8e:4d:11:2a:4e:d2:23:ad:9a:d0:37:
72:be:9a:7d:20:23:d6:8c:60:82:1b:62:95:7d:de:e5:99:d8:
cf:0f:70:e1:15:c4:eb:a5:0f:4a:87:55:a9:1d:61:8c:1a:13:
7e:e0:80:b2:2d:c1:db:c0:82:8c:60:c7:af:07:47:18:90:24:
f0:d1:f9:4c:c0:b8:79:f0:dc:09:16:3a:4a:55:6b:54:87:61:
c3:1f:f2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:42:28 2025 by rpki-client