Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer
File: Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer (raw, json)
Hash identifier: CGZYgpGg3GQDTXt2KNvsMnILmgNVsfwHi74vW8axSaM=
Subject key identifier: 59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0222AD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 14 Dec 2024 15:55:56 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 45139
AS: 132348
IP: 111.221.16.0 -- 111.221.27.255
IP: 111.221.29.0 -- 111.221.31.255
IP: 111.221.64.0/18
IP: 163.57.0.0/16
IP: 202.89.224.0/21
IP: 2001:df0:7::/48
IP: 2001:df0:d7:: -- 2001:df0:d9:ffff:ffff:ffff:ffff:ffff
IP: 2404:f800::/30
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139949 (0x222ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 14 15:55:56 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91A3E3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:a8:32:33:81:e9:f1:68:65:32:30:f6:dc:
31:de:17:6b:c2:59:78:b0:53:3e:64:c2:ec:ea:7f:
6c:f3:89:f3:e6:b8:ba:3b:6c:7b:7f:a8:80:0a:90:
ed:31:6a:ef:8a:a2:ff:36:94:b5:2b:7f:48:60:d9:
71:cf:6f:73:2f:e1:60:fc:d0:b8:35:f7:db:74:29:
fc:49:ee:05:75:3b:cf:f3:50:a5:5d:ce:e5:15:eb:
56:11:2e:2c:02:0f:fb:7f:22:ed:c2:2f:fa:7e:17:
51:56:44:e3:e0:fa:29:2f:98:00:28:f5:f5:d3:b5:
ae:b6:bb:3d:21:74:35:00:dc:78:49:d3:1c:00:74:
8d:19:fe:b5:24:0d:0a:aa:66:b2:ec:5c:b7:d0:ff:
b6:8c:63:58:09:4f:60:f2:43:c2:e1:6e:52:a7:9e:
21:c5:a0:13:78:55:fe:27:85:4d:79:f9:f3:20:49:
3f:95:31:8f:21:f7:a2:ed:00:83:e6:2d:55:8b:83:
07:d0:07:af:ca:fe:34:ee:5c:94:20:76:fc:0f:fa:
8f:d5:82:63:ef:48:9c:c3:5b:67:7d:55:cd:99:c3:
da:d8:b3:d9:ee:2e:03:84:67:e6:9d:db:98:70:f5:
42:26:40:0c:ea:91:c4:ac:1b:5d:01:0f:56:0e:10:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45139
132348
sbgp-ipAddrBlock: critical
IPv4:
111.221.16.0-111.221.27.255
111.221.29.0-111.221.31.255
111.221.64.0/18
163.57.0.0/16
202.89.224.0/21
IPv6:
2001:df0:7::/48
2001:df0:d7::-2001:df0:d9:ffff:ffff:ffff:ffff:ffff
2404:f800::/30
Signature Algorithm: sha256WithRSAEncryption
63:96:7d:44:19:09:62:e0:84:07:7a:82:00:d6:a2:79:5e:ff:
26:c0:7a:80:6b:0a:4a:2a:aa:ad:25:69:d8:ba:dd:85:42:55:
01:6c:1e:bc:fa:11:0b:dd:bf:fe:bf:02:27:04:64:5f:4a:8e:
e6:4c:f9:70:f4:c9:6d:bd:1f:8a:33:24:a4:8a:13:3e:c6:97:
69:cd:4b:e3:24:bd:ec:31:5c:e2:04:9c:a6:5a:ee:42:32:43:
2f:60:44:4d:2a:82:7f:04:93:90:52:28:da:c5:0c:dc:43:48:
e8:db:2b:9f:03:b6:76:12:46:06:ef:85:7e:9a:cf:17:12:53:
2b:25:48:0e:4b:5e:0f:ad:c8:e7:ec:63:04:73:7f:e8:a5:f7:
2d:3b:1f:4c:9a:9f:dc:c5:18:06:c6:9d:f5:67:dd:6c:49:b1:
f6:4d:00:7a:3e:0c:9d:58:6f:4b:cc:ac:70:12:c8:b7:fb:1e:
2b:dc:5f:ed:a1:0a:74:a1:03:1f:5f:f2:48:27:37:bd:64:eb:
26:b6:f2:6e:2f:f8:eb:b6:fb:87:c6:a0:71:27:87:3f:e5:f5:
74:96:c5:92:08:b6:f6:ee:d7:38:7e:c6:79:0d:37:03:93:44:
96:c9:1d:1f:b1:bc:5f:9b:5d:e5:0c:63:0d:b5:52:dc:38:1a:
9a:67:06:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:05:22 2025 by rpki-client