Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
File: a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer (raw, json)
Hash identifier: AdQornlgdMzZjptT8YVExzRBvu/mYJeeuOIeeBFVxis=
Subject key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023017
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 10 Feb 2025 03:30:18 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 153581
IP: 163.61.96.0/23
IP: 2001:df5:11c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143383 (0x23017)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 10 03:30:18 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91BDEEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:34:52:45:b5:e9:27:e2:b8:ae:09:02:9d:82:
88:43:df:9f:ec:89:66:5a:01:68:75:15:91:42:8f:
3b:01:0c:3a:01:28:16:dd:e2:9f:f4:4f:38:65:7f:
db:d4:df:2b:c9:79:09:d9:fa:8a:fe:24:ed:42:04:
79:a5:e0:3f:91:c0:75:a6:5b:a5:09:d2:f2:ed:2e:
b7:a3:06:2c:88:12:19:a4:27:7d:6b:e9:f5:40:23:
06:9f:f8:3c:39:e5:77:ec:71:c5:74:a7:b6:71:4c:
97:3d:db:e5:69:31:00:d6:d9:5c:f6:2e:95:d9:20:
e0:46:fb:9b:9b:d0:04:25:1e:6b:86:68:4c:ac:a5:
f6:46:d0:2e:1c:00:62:60:53:45:8c:84:ee:7d:8d:
a6:a8:6f:3e:e4:d5:bd:a4:0a:2a:b4:fe:38:29:02:
b8:c2:7f:b2:33:70:4e:25:72:f9:0e:67:8b:1a:a5:
55:ae:9d:49:90:5d:11:2f:34:a2:7c:15:03:ae:b1:
09:bf:eb:07:6d:02:07:d1:9e:e9:89:50:67:40:9b:
2d:19:ec:30:0a:6c:ac:9e:78:81:ae:1a:05:2f:2f:
60:dc:be:c1:fc:8a:1c:88:7e:16:a4:e2:33:cc:10:
58:79:ca:2b:a2:89:ed:f8:51:58:80:af:3d:8d:a5:
ca:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153581
sbgp-ipAddrBlock: critical
IPv4:
163.61.96.0/23
IPv6:
2001:df5:11c0::/48
Signature Algorithm: sha256WithRSAEncryption
0a:50:df:83:7a:4c:89:08:42:5f:94:e0:c8:f6:24:cc:a9:33:
54:44:dd:9c:d6:1f:a9:64:2d:fc:54:77:7d:46:03:8d:59:b1:
85:0e:58:85:73:d5:7d:5d:25:4c:05:ce:52:ee:a9:2d:0d:c2:
b9:ac:65:ac:26:00:f8:01:56:10:be:9f:b7:2b:24:9c:a8:d4:
a3:a8:06:6c:5a:6c:fc:e4:56:de:c4:8f:f0:12:b4:1a:9e:cc:
85:9c:c0:19:20:37:37:d0:65:25:8f:53:9f:4b:fc:88:16:d2:
78:60:2f:8a:8b:bd:79:76:4e:fa:6b:29:d0:60:68:d3:1a:ce:
c2:09:bd:8f:10:af:06:c8:a7:d2:02:ac:60:87:25:fb:18:42:
cd:f2:b7:cc:4f:68:20:41:d7:85:2e:d1:fe:70:ef:91:fd:76:
8c:ff:f1:a6:be:db:af:f3:27:4a:70:29:81:83:47:f5:b4:a6:
c5:94:36:22:80:e1:62:3b:ed:dd:9b:15:ea:2b:57:e5:5c:9e:
d5:2f:b4:39:3d:88:02:65:cd:f6:1f:73:3d:c0:18:af:e3:23:
a6:e2:b2:04:1c:50:42:86:f3:53:1c:be:68:3e:c0:6d:94:d1:
03:25:5e:51:5b:11:28:03:2f:3f:4f:b5:ae:ca:13:ea:36:4c:
5c:3d:41:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:08:39 2025 by rpki-client