Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer
File: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer (raw, json)
Hash identifier: 1NtarQPL+A6Kzjy7OWe/NZAxIYjmlTYxBrXLaQX/sjs=
Subject key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0225FD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 31 Dec 2024 04:59:19 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 152148
IP: 36.50.72.0/23
IP: 2001:df3:42c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140797 (0x225fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 31 04:59:19 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A912E80C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:fa:5b:8a:33:38:1e:23:ce:ae:6e:89:73:
ce:f5:6d:d6:9f:3c:b5:42:53:26:b8:f5:5d:70:aa:
e1:6d:a2:8f:d9:46:0b:ad:b4:5e:15:77:c6:ec:05:
9f:52:4b:d0:81:6f:f9:c2:04:b3:a5:5d:d8:e8:d5:
08:ae:cf:14:e5:ec:be:e9:0c:fa:b6:5a:9a:ac:20:
d4:62:25:dd:97:ae:15:cc:51:e3:76:29:2f:6b:57:
ac:03:9e:c6:f6:03:77:4f:3c:d8:b1:3d:25:96:58:
6e:06:26:14:5b:1f:e1:77:14:07:68:4c:f0:91:c9:
46:dd:c2:f0:86:8b:56:cd:f0:dd:ef:1d:55:14:99:
b6:59:14:1b:ca:cf:94:61:17:44:26:7d:d5:77:5c:
b0:71:8e:04:5e:93:f6:fa:27:a3:24:bd:01:e7:9f:
84:27:20:b5:fa:21:46:a5:e9:e5:cf:06:b8:05:54:
60:06:a4:84:18:41:bd:66:0e:2d:42:18:f8:fd:54:
9d:ce:dd:c4:de:34:72:66:b6:b2:8b:79:4d:7c:f6:
eb:58:a1:a0:0b:57:6f:70:6d:2a:ea:31:f5:ed:36:
87:d0:d8:12:2d:a0:9a:fb:72:ac:d3:b3:11:f6:19:
b0:88:8d:2e:8e:2e:32:a5:e8:f2:3f:4b:a9:9a:4a:
20:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152148
sbgp-ipAddrBlock: critical
IPv4:
36.50.72.0/23
IPv6:
2001:df3:42c0::/48
Signature Algorithm: sha256WithRSAEncryption
cb:af:f8:fd:16:2c:46:2d:30:52:b4:56:3b:37:e1:bf:cc:38:
fb:4c:1b:c5:41:5f:1d:7b:b7:59:a2:d7:54:9f:59:de:b1:f9:
04:7e:ce:22:44:da:f1:f2:bd:84:e9:47:31:42:56:e6:37:e8:
07:34:fc:d2:5a:70:9b:b1:02:29:3f:7b:1f:17:f9:ae:13:ac:
9d:4f:1b:4a:a9:3e:c5:68:e6:78:d7:e6:af:fe:23:81:46:4d:
be:81:39:77:00:8f:e7:45:4b:93:c7:d7:c8:7d:81:a9:b4:a0:
ff:0d:6d:2a:b0:3a:95:17:5e:ae:88:1b:27:df:55:64:fa:77:
1f:a0:66:0c:e2:29:37:f6:16:f2:8b:fc:66:1f:44:9e:c9:63:
46:89:dd:29:1a:68:b3:f3:75:a0:7e:7e:e3:4e:84:46:14:c6:
65:12:6b:b0:40:95:94:91:97:6b:75:19:69:87:03:41:0b:ba:
e1:21:c0:5a:ce:13:38:b7:0d:82:5b:b1:8d:8a:7e:0d:83:88:
1e:5a:00:4d:19:7e:7f:3f:24:ec:37:da:87:0d:e5:ef:ab:97:
77:96:17:4b:70:bc:8e:18:5e:7b:81:e4:dd:00:e8:7a:9d:5d:
53:2a:3f:d6:55:b9:43:36:0e:05:82:ba:f6:11:1b:aa:b7:99:
d8:d0:ae:0f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:30:20 2025 by rpki-client