Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer
File: Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer (raw, json)
Hash identifier: gu2vXABY9Ao2fcrJSpNOUZyBhngXk9B/9ZiwRF3l/TY=
Subject key identifier: 5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023A97
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 29 Mar 2025 01:25:12 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: IP: 203.27.114.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146071 (0x23a97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 29 01:25:12 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91806C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:ee:2f:16:c0:b2:68:50:a5:31:6a:81:cf:
33:b4:05:7c:3a:23:08:ad:79:00:76:27:8a:ad:f8:
9a:43:0c:01:a9:9d:7e:44:3d:19:a2:5c:61:70:65:
e1:2d:67:18:91:5a:0c:33:cd:8c:35:9e:5b:d1:dd:
80:63:df:2b:30:e4:2b:fc:ea:58:a1:81:18:6d:fa:
0d:6e:8e:1e:45:ca:89:29:97:ab:6e:01:16:0f:e1:
22:0f:f5:f4:17:b7:79:88:b9:0b:f2:df:65:e5:6d:
06:b4:d8:25:4c:37:b2:19:8c:09:86:b4:ae:e5:22:
9e:bf:7a:64:f8:e0:17:b4:a2:32:3c:3f:97:38:53:
50:db:ed:42:10:53:cb:76:de:aa:bf:6e:92:f6:eb:
22:23:9a:50:ee:70:99:be:1d:75:43:30:fb:0d:fb:
8a:4a:14:c0:35:15:f7:e4:64:7b:f6:2d:9a:c4:76:
f8:51:43:e3:9f:54:14:63:dc:25:99:15:70:33:69:
77:be:83:65:69:8a:42:ec:63:03:80:55:79:10:24:
7a:61:12:9e:9c:4d:a7:01:4e:b3:b3:3f:40:71:c0:
92:79:9b:f6:c3:2c:a1:11:c9:b0:ed:5f:e1:22:3f:
92:4a:59:ab:1b:25:03:6a:0e:fe:e7:ef:01:c3:65:
6d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.27.114.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:83:d4:3d:92:de:a0:b1:f1:8f:6e:d7:8a:70:c4:b1:70:77:
81:0a:ad:be:08:e9:12:ae:15:67:c3:5e:ae:2d:c4:f3:2e:28:
20:cb:80:c6:c7:20:85:a8:83:55:81:81:5a:90:d4:88:99:c8:
bd:f1:a1:cc:64:2d:51:c3:03:70:4b:20:37:f2:9d:b5:22:05:
6e:12:6d:a8:60:66:52:2a:ff:87:c4:0b:f3:08:ac:ec:09:6d:
5f:3c:4e:92:02:4c:f7:ec:8f:de:9e:69:31:9e:1d:89:c4:f2:
12:d2:48:f2:96:40:67:0f:62:58:d2:8b:0b:f3:17:36:b1:32:
e2:6d:9e:cd:0b:60:7b:27:a2:54:56:e7:f8:45:c8:bb:2b:e1:
99:56:aa:ae:dd:55:9d:ea:7c:10:ed:ee:b1:4f:41:06:16:e0:
14:a2:a5:94:fa:dc:87:df:c1:5b:e6:2c:59:aa:18:c0:77:df:
95:60:de:da:bb:cb:db:7f:25:c1:61:34:63:cb:b2:84:de:1f:
7d:14:20:2a:a6:da:e1:ec:c0:55:94:06:b7:24:fd:1d:3c:87:
00:88:f1:1c:8f:1e:18:65:f7:8b:b6:59:d2:6b:07:37:a5:d0:
ed:90:51:87:e9:2e:c8:da:60:5d:4e:a9:ab:da:28:1f:7a:57:
2e:0f:8c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:15:08 2025 by rpki-client