Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer
File: Yg05s6GDeXO9EyafKwasmyc4gg0.cer (raw, json)
Hash identifier: OoXxKLBc3hXZ3QL0nsB8EZ7VPbdNptmvR3/UTVtWOh4=
Subject key identifier: 62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022E83
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Feb 2025 07:33:56 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 18381
AS: 153368 -- 153369
IP: 43.250.52.0/22
IP: 103.41.176.0/22
IP: 103.147.152.0/24
IP: 2406:4fc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142979 (0x22e83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 3 07:33:56 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91A6F68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:5a:fc:07:14:96:e9:65:d2:8f:8d:29:7c:
a7:cb:7b:2f:78:22:54:97:3e:64:fd:bc:4a:1c:6a:
98:85:05:5b:52:84:c4:6d:25:bf:d9:e6:4b:2c:e1:
8f:19:2f:64:f2:18:c6:14:77:a3:b8:88:d7:4a:4b:
d7:07:3b:f2:13:61:be:03:fc:c2:4f:5a:09:49:db:
df:cf:83:b5:0a:6a:cb:5f:c4:6f:3f:1d:f0:97:59:
2a:eb:ac:5f:a5:c2:dc:6a:16:c4:cb:1c:57:af:fd:
14:75:62:11:55:f2:b4:5c:4f:ca:16:fc:fc:90:aa:
b5:7f:33:0e:d0:5f:f2:70:c1:28:a3:fc:49:61:ee:
8e:82:66:3f:2d:70:bc:5b:96:61:d0:2a:bc:6a:6d:
7f:95:4e:3c:46:da:f6:af:c1:1f:6f:11:85:24:95:
4c:23:3d:ea:35:0e:36:7a:e5:54:2d:b6:14:fa:27:
85:4e:05:9c:81:0d:b5:9d:aa:23:c6:a2:e1:22:55:
ea:6e:67:23:df:8f:33:22:a2:34:00:e4:94:46:54:
76:e8:89:4e:0b:c9:b5:04:7a:e7:aa:5e:7e:46:42:
5b:69:5b:de:e3:08:7d:36:68:d7:cf:a0:41:2a:1e:
51:d9:64:15:3d:16:db:eb:29:a3:7f:d3:9b:12:6a:
7f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18381
153368-153369
sbgp-ipAddrBlock: critical
IPv4:
43.250.52.0/22
103.41.176.0/22
103.147.152.0/24
IPv6:
2406:4fc0::/32
Signature Algorithm: sha256WithRSAEncryption
d8:e1:2f:b2:00:73:f8:17:63:84:dc:37:d1:f7:50:53:d3:f8:
39:c4:a3:fd:a4:26:18:2a:a1:b8:cf:4c:c5:b4:0b:74:1b:37:
7d:df:2d:35:21:44:c3:0f:52:d7:24:69:fa:36:d5:b4:c4:2d:
d5:fd:46:76:c0:f9:a4:09:55:fe:02:31:05:ad:8f:ef:4c:f4:
4a:f4:86:5d:2e:02:24:6a:01:3e:c7:2a:f5:26:47:31:78:73:
6c:89:17:f4:6b:23:c7:37:b1:9d:bf:04:76:db:46:40:f5:a3:
94:b0:7e:d9:6e:43:24:15:3b:bd:d1:4d:5b:2e:09:f3:15:21:
16:1d:cb:2c:e8:63:91:0c:f5:ab:19:64:07:84:d5:76:cc:e4:
c4:bf:8c:c4:31:f8:56:d9:fb:db:a7:ee:54:36:27:e9:36:77:
96:1c:c8:79:f1:58:bf:dc:76:bd:eb:eb:93:13:f0:81:a1:34:
3f:3d:57:27:32:65:32:91:cf:da:26:bf:49:b7:04:60:e9:e9:
f1:ad:01:41:17:72:99:07:37:e4:35:19:27:d4:87:82:6c:67:
52:8c:0e:d8:cc:f0:38:ac:6b:3d:fb:9a:8c:86:b5:f1:36:b4:
c2:41:20:db:8c:1d:54:0e:2e:2b:3a:0b:89:4d:96:b1:07:a4:
01:24:16:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:07:06 2025 by rpki-client