Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
File: YHYovkVe83m-Zq-dbKm6js3tPwQ.cer (raw, json)
Hash identifier: o683KUXQz0yLPhIMdlAD69zPU9r/Gd9n6cxVjvJFkmA=
Subject key identifier: 60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022130
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 06 Dec 2024 20:23:46 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 140712
AS: 149876
IP: 103.152.26.0/23
IP: 2001:df3:f280::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 04:14:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139568 (0x22130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 6 20:23:46 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91817E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:a6:4b:2d:9e:1b:26:82:80:f3:f9:9f:40:
b5:8c:b5:44:42:a6:69:ad:67:cf:6a:23:a5:6f:67:
ef:d6:a5:6d:31:31:65:f5:c1:b8:4f:3c:58:c6:b4:
07:d2:dc:fc:f0:30:62:aa:e6:e2:f5:96:43:fb:bb:
c2:06:a9:b3:af:3c:e4:5d:5d:27:d6:dd:84:2f:99:
bc:0a:45:17:0a:82:86:f6:dd:e9:59:a4:95:1f:7a:
52:59:32:7d:ed:10:57:a4:9b:a0:c5:29:15:5c:ec:
3e:91:cc:39:ac:e2:15:6f:a4:96:52:95:f1:fe:d8:
23:0e:62:93:96:b2:cf:5f:d3:c9:92:49:d2:ec:7f:
0f:7e:68:3f:f2:48:e7:da:ef:76:f8:a3:89:f3:ef:
ae:02:0b:84:a0:d1:f4:4f:91:4a:69:0c:bd:17:46:
b2:e3:bd:00:3e:a9:be:57:62:fc:3d:46:22:16:b9:
7a:c6:28:40:18:b2:82:a0:ef:1f:56:52:a0:ce:8a:
7d:9c:34:ec:6c:8b:af:46:56:4f:28:48:59:e1:92:
e5:3a:4f:b1:df:7c:21:10:cc:14:5e:e6:f9:f4:34:
f9:03:a2:33:e0:98:f6:1e:7f:74:4e:7c:2f:a2:f1:
98:44:e1:cd:a2:34:45:c5:1f:ec:9c:d4:6f:1b:01:
a2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140712
149876
sbgp-ipAddrBlock: critical
IPv4:
103.152.26.0/23
IPv6:
2001:df3:f280::/48
Signature Algorithm: sha256WithRSAEncryption
21:ea:69:a6:2a:d6:1f:10:18:56:53:35:03:91:1c:80:2e:29:
5d:f7:cb:e4:d1:2d:63:2e:28:53:7f:5d:4e:54:64:ac:89:db:
ca:c0:94:20:4f:6f:3c:0e:e3:88:83:b8:e1:b5:11:6e:fb:c7:
79:98:55:42:ab:72:56:8b:2d:e8:1d:82:fc:fd:6a:cc:70:e6:
ea:c4:e5:30:dd:7a:78:86:3f:bf:97:33:d9:fd:d1:6a:35:92:
3f:66:4d:cb:74:36:35:a9:bf:23:db:23:4d:c0:1f:eb:da:f5:
ec:c3:82:cf:e1:6b:75:76:ed:c8:28:00:44:5d:fd:33:19:cb:
62:a5:da:8e:82:95:c5:e2:97:ef:90:57:d4:be:11:1b:e9:27:
4c:f0:fd:97:5a:42:0e:3c:9f:0e:68:f6:42:9e:62:7f:09:b4:
1f:af:67:6c:6d:1d:37:64:43:01:7f:a3:0b:60:f2:0a:e3:ed:
c8:9f:f0:a2:bd:3b:31:49:da:3b:7a:e3:20:c7:b7:60:c8:73:
0a:08:ff:00:5a:12:dc:28:97:10:63:0f:c7:da:3f:50:41:c8:
4e:a0:00:4e:ee:2d:45:20:dd:20:f5:b9:05:21:56:af:ee:51:
c2:bf:77:79:cb:54:be:a8:d9:24:4a:20:a7:83:e5:c5:98:b8:
86:9b:9c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:49:44 2025 by rpki-client