Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer
File: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer (raw, json)
Hash identifier: mrk97PP7MZoRE9FClySZKFs0YUK5GNs/0zuNNGA08TI=
Subject key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022C57
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Jan 2025 01:17:56 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 38600
AS: 45498
IP: 27.109.112.0/22
IP: 103.145.136.0/23
IP: 117.20.112.0/21
IP: 202.56.0.0/22
IP: 202.93.153.0/24
IP: 202.129.236.0/24
IP: 203.18.216.0/21
IP: 203.118.242.0/24
IP: 2401:9700::/32
IP: 2405:3900::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142423 (0x22c57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 30 01:17:56 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91E2364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b0:2a:00:35:10:1e:f7:fd:bd:24:10:2a:35:
d0:11:97:a1:fd:a1:97:9f:10:61:6e:ff:4c:a4:dc:
11:9a:67:dc:e4:13:66:8d:2b:be:8d:57:ad:7a:b7:
fb:04:db:ef:0e:63:b2:3e:25:ee:29:11:c2:79:45:
35:9c:12:98:d1:f9:98:b1:7d:d7:c6:04:ac:84:c6:
20:d6:b0:71:68:fb:6d:a7:5b:ba:77:95:13:42:fc:
a8:a2:0a:4b:06:3c:e7:9e:4a:70:86:82:6c:f6:cf:
39:ee:5a:c1:f6:82:eb:4f:ba:99:07:c7:a8:2c:20:
16:00:82:d0:ad:e8:e7:e5:63:48:29:b2:d5:d4:be:
51:d4:84:ee:66:6e:0c:8a:6f:a3:25:90:66:f5:f0:
79:70:11:e4:93:7d:6f:df:9c:74:ad:85:2d:11:1b:
8c:5e:64:d0:1d:74:74:67:2a:65:88:fb:43:67:34:
50:61:b9:6c:be:f0:7e:e8:fd:4f:09:d9:a8:bd:9a:
86:b2:75:50:d9:99:34:74:c3:d2:ac:db:74:be:d7:
8a:af:a7:65:b8:c4:ca:36:33:e8:81:18:fe:37:f6:
9c:f2:e8:c9:91:fc:1a:be:a8:fa:1b:d0:2b:f8:a8:
73:3f:e2:0e:4c:90:26:54:d4:62:e6:1f:3a:5e:da:
88:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38600
45498
sbgp-ipAddrBlock: critical
IPv4:
27.109.112.0/22
103.145.136.0/23
117.20.112.0/21
202.56.0.0/22
202.93.153.0/24
202.129.236.0/24
203.18.216.0/21
203.118.242.0/24
IPv6:
2401:9700::/32
2405:3900::/32
Signature Algorithm: sha256WithRSAEncryption
d1:cf:78:79:31:96:3a:93:6d:92:ae:39:f1:9e:bd:8a:c5:46:
f7:8f:72:d5:e6:fd:e3:a0:dd:10:f7:6b:50:12:a0:f0:c9:2a:
1a:a2:d4:21:4e:b5:a9:53:6c:07:08:f2:b7:64:7d:2c:63:55:
6c:8c:4c:a3:df:4a:f0:0e:20:89:92:f1:f5:db:6e:dd:a4:30:
ec:5e:13:03:27:60:17:84:e2:4e:f5:09:26:41:06:af:2f:ce:
6f:2d:2b:a3:3c:93:ec:5d:db:09:58:e3:4e:29:0e:b0:74:ff:
9b:3a:b2:6f:72:51:16:a3:93:02:52:20:57:32:ec:a1:ac:60:
89:89:88:09:52:29:09:ad:ff:0b:7a:66:b5:05:9f:e3:53:a5:
00:cb:a7:ed:7f:84:b6:8a:c1:1a:a4:9a:4f:f6:f7:20:6e:db:
ca:3f:90:f1:d1:4b:d9:9b:85:bb:e0:00:a3:06:39:df:6d:6c:
b6:0a:17:b5:c7:bf:62:87:0a:c5:4b:bd:e3:a5:e8:94:6e:70:
cf:4d:a5:af:ee:7c:83:a1:4a:7b:ca:1c:79:8d:cb:98:62:4a:
6a:91:71:08:fd:21:bf:85:0b:d1:c1:78:3e:0f:fa:33:76:1d:
ee:4a:28:04:af:d1:88:37:e6:ac:60:6c:c1:5d:b7:b0:ac:c1:
3f:9d:58:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:24:48 2025 by rpki-client