Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
File: ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer (raw, json)
Hash identifier: LewDIHAGjBZn8zvnSlYXF4X1IHtsWCVLn0yERJXlcDY=
Subject key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022976
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 15 Jan 2025 14:33:35 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 45531
IP: 103.246.20.0/22
IP: 203.170.20.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141686 (0x22976)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 15 14:33:35 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A914E3F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6b:a0:50:89:2d:6c:18:db:7f:cc:3c:91:12:
a8:d2:f0:17:76:33:be:2e:bb:57:2a:6d:cc:0e:18:
2d:2c:08:4c:9f:a6:3d:53:ce:d4:d3:56:e5:6a:cf:
ab:64:87:7c:31:c3:b3:66:11:61:37:a8:49:fe:d2:
6e:e8:2d:8a:4a:70:27:10:47:d6:a9:af:6f:0f:56:
5a:08:b1:d1:2a:c6:6b:58:53:0b:55:e8:d8:24:05:
b2:9a:6b:50:65:58:0f:c5:1c:12:ed:50:ca:18:a6:
78:fe:1e:7b:6f:ae:72:62:66:6f:65:62:6c:30:98:
7d:f2:0a:0f:37:18:6f:87:de:37:de:2c:64:7d:10:
25:49:cd:52:5d:72:4a:27:eb:31:89:fd:77:25:c4:
1b:9a:1c:8c:88:f0:79:9f:1c:e2:2a:c2:e2:e1:8e:
55:bc:e6:89:9e:41:9d:a7:5a:d5:4c:19:09:37:f0:
2a:15:f3:6b:ed:00:b0:d2:f1:71:f7:c5:76:84:3a:
68:0b:e2:90:87:db:d3:b1:64:e9:39:1e:49:54:09:
e2:2a:8b:12:00:51:fb:54:c2:e1:4e:87:18:78:6c:
a0:9e:3f:0d:bf:cd:13:99:c6:7f:82:e1:be:4d:65:
d0:24:c5:5e:df:ac:2a:3a:75:d6:e0:4e:2d:b5:b5:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45531
sbgp-ipAddrBlock: critical
IPv4:
103.246.20.0/22
203.170.20.0/22
Signature Algorithm: sha256WithRSAEncryption
35:b4:16:b6:f6:58:b0:c0:1a:19:a9:5b:c9:ac:91:46:33:c3:
f3:22:3c:47:6e:3e:ff:74:b0:38:fe:10:4a:5b:77:e1:4f:17:
bd:ab:5a:44:8c:1b:ea:4d:52:05:e4:87:3d:2a:23:35:6e:8a:
e3:64:aa:4e:c4:7b:ce:0b:35:7b:07:31:3c:08:c4:dd:28:37:
7c:e2:2f:82:60:fc:db:88:d2:01:d1:7d:a7:9d:10:9d:ae:91:
de:02:08:2a:21:d3:b7:28:fc:b6:d5:45:9f:c9:5f:ec:23:45:
96:ca:b7:24:d7:58:a9:05:4d:2e:a0:ce:23:1d:a4:24:c3:7a:
19:ed:d7:62:40:c9:7f:75:bc:68:2f:9e:71:77:60:ea:5f:b2:
dc:97:8e:ba:87:1e:03:8a:ea:39:c9:18:9b:bd:c0:51:d5:6c:
5f:be:b7:c8:40:47:86:0f:2d:d8:53:d0:94:2d:d1:c6:e5:24:
d5:11:65:22:9d:05:e8:73:17:fb:19:4f:2a:61:2c:0e:0d:23:
6c:84:d8:0f:f9:fa:07:46:69:a9:0c:e8:d5:a0:dd:d2:2b:58:
da:3a:b2:94:4b:6e:b8:e8:9a:8b:56:84:49:e7:22:cb:c2:e2:
ad:10:8c:e9:b7:ea:dd:db:d3:bc:32:3c:52:4b:65:df:4c:e8:
1b:6a:e4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:11:39 2025 by rpki-client