Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5mZzaZKKhpmLlTmGh1XmMaIzMM.cer
File: X5mZzaZKKhpmLlTmGh1XmMaIzMM.cer (raw, json)
Hash identifier: tfI35CQvhSLJROAievxoG1vhyin/de9XbxTTMQRfoE4=
Subject key identifier: 5F:99:99:CD:A6:4A:2A:1A:66:2E:54:E6:1A:1D:57:98:C6:88:CC:C3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022F68
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Feb 2025 18:41:44 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 137480
IP: 2402:8440::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143208 (0x22f68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 5 18:41:44 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A91C5413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0b:fb:10:0c:ab:a0:81:dc:38:a5:a7:03:36:
b4:ac:35:e5:b2:d2:92:84:a1:d1:de:48:56:24:b1:
ec:0b:75:1f:f0:69:d1:88:7f:80:d1:06:27:da:b3:
5a:50:a5:06:b3:a1:4d:4e:33:40:12:ee:78:27:8c:
ca:c9:49:5f:62:cf:12:0f:3f:19:ad:22:24:52:ca:
07:cb:9f:66:fd:8c:ea:85:62:2c:e7:f1:48:1a:27:
d3:24:4b:43:5b:c7:07:a4:59:94:d6:12:16:99:dd:
bb:74:ed:29:9f:b9:4d:e1:3f:75:82:32:93:ea:fb:
7f:e4:a1:3c:90:fe:f1:bc:b1:64:85:f3:ef:07:0b:
f1:8e:cf:1c:58:b8:95:96:12:db:8e:55:19:83:c8:
d6:5b:94:55:b9:2b:a9:b9:82:70:39:60:c6:76:6f:
8b:e3:8e:84:5c:af:4c:6e:3e:de:1c:73:63:d3:0a:
58:ab:cd:94:c6:55:08:55:3c:1e:f0:8e:8c:a5:6e:
76:53:41:41:fa:96:9b:f4:e9:67:5d:df:5b:c9:b2:
05:ca:14:5d:f7:a9:d8:b9:48:d2:b8:c3:09:47:4b:
2e:58:ef:0a:0e:3e:ea:26:6d:bd:1a:23:4d:0f:bf:
b0:ba:3e:9f:f9:b6:01:cd:13:3b:f5:bd:85:99:23:
17:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:99:99:CD:A6:4A:2A:1A:66:2E:54:E6:1A:1D:57:98:C6:88:CC:C3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137480
sbgp-ipAddrBlock: critical
IPv6:
2402:8440::/32
Signature Algorithm: sha256WithRSAEncryption
95:27:de:68:23:8b:f0:1b:0c:5e:47:54:55:66:f9:6f:ad:2b:
43:94:9a:d8:58:25:1c:3b:c6:fc:36:bf:32:c2:39:72:43:93:
74:83:7d:e8:9f:a3:cc:be:36:16:60:34:a4:24:c6:87:08:65:
97:1d:d3:63:a1:3c:46:f9:80:ec:56:85:90:80:c0:1d:4c:c4:
e7:d4:85:13:a5:d4:9c:9b:d7:9d:79:51:6a:1f:29:e5:00:51:
44:c5:d8:39:72:5c:0a:12:22:ae:da:45:b2:b2:01:f4:9b:49:
aa:35:68:b7:a8:17:28:3a:ea:0b:d6:02:5d:8a:41:2c:ff:ce:
0e:83:c0:29:9a:83:3f:31:c1:04:68:4f:08:2d:fc:40:46:46:
d0:c7:89:05:86:fd:35:b3:93:68:50:e4:60:d2:6d:11:9b:4f:
0f:dc:79:e8:68:54:0b:20:7d:39:61:3b:62:8a:59:cb:5b:6f:
c4:96:09:d9:fb:c2:fc:52:08:9f:5d:1c:0a:2d:84:30:63:4d:
4a:ff:5d:42:f5:65:39:cb:9f:19:44:a7:f9:85:16:f7:a9:c1:
b2:79:02:0a:ce:4e:c4:9e:74:d6:1e:3a:e3:67:bd:10:2b:54:
f4:28:db:75:3e:78:d6:c3:19:a9:88:58:bf:c7:92:bd:9f:69:
95:61:cb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:45:35 2025 by rpki-client