Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer
File: aJtDtI4RHmnx33nMohHMtCZaJns.cer (raw, json)
Hash identifier: jWQ7edxPyCP8ygUuQshI0nsEcDKC81luIBnjaeb9QBo=
Subject key identifier: 68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022291
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 13 Dec 2024 14:41:37 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 138333
IP: 103.159.26.0/23
IP: 2406:c8c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139921 (0x22291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 13 14:41:37 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91688C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:72:3a:f2:f4:f7:8e:2c:b5:27:44:75:5e:
88:39:f2:47:6f:c9:be:94:63:d1:fb:8e:05:2a:c1:
89:d0:9d:c8:14:47:07:90:55:2c:48:ef:80:46:74:
0c:7b:38:a8:a7:23:bb:d5:96:e9:86:fe:56:70:e4:
5f:a1:c9:47:9f:f5:7e:5e:70:5a:75:0c:bf:3a:14:
cf:b3:de:1d:84:ab:36:c0:3a:a3:e1:9f:8a:43:d5:
59:60:70:b0:4b:b3:64:28:ae:82:f9:5d:50:82:28:
cf:09:d6:6a:ee:bc:b5:9a:ae:df:6e:1f:d7:9c:01:
e7:f1:02:e8:82:ec:54:b5:e7:db:a7:d7:60:e7:8d:
c9:38:c5:e7:74:3e:a4:dd:b0:64:e5:4c:23:6f:e1:
6e:b5:2d:85:ee:b9:0a:46:b3:85:f5:ef:8f:25:71:
f2:06:fe:e7:05:e1:38:a7:54:7f:93:b5:f0:11:6b:
f3:3c:de:92:b3:08:de:c7:b3:3a:18:31:fe:d6:9d:
76:af:1d:ce:ac:96:5a:51:69:66:95:88:d9:72:fe:
8c:33:6f:b4:3a:22:4a:66:4a:3f:17:d9:95:d3:65:
6d:a5:7d:b4:4d:97:83:96:fd:05:4a:33:91:30:b6:
7a:1c:93:3c:a4:1b:bb:61:5b:67:ad:ba:2b:e5:56:
de:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138333
sbgp-ipAddrBlock: critical
IPv4:
103.159.26.0/23
IPv6:
2406:c8c0::/32
Signature Algorithm: sha256WithRSAEncryption
9c:c0:23:4a:63:a2:5f:6c:a0:4e:41:b0:24:ac:bf:82:3a:41:
9a:3e:9d:09:78:23:64:35:14:eb:db:48:92:78:29:47:44:52:
0c:a4:4b:4f:12:fd:50:00:86:1a:bf:07:2e:47:2c:8d:f9:ee:
db:2e:a1:06:da:16:9d:da:77:00:7e:aa:bd:51:9a:00:35:ff:
6b:ed:5e:71:af:3b:d7:48:8e:a0:09:98:c5:5a:bf:0c:84:2a:
a1:77:c5:a3:b9:30:88:6f:65:d0:d0:d8:7b:93:60:0b:9d:90:
e6:59:cf:56:75:13:32:46:49:05:68:12:ce:ed:61:f1:75:15:
3a:f2:42:27:0b:94:7b:a8:47:c9:ad:8d:fa:9a:60:ab:81:ed:
80:a2:81:a1:52:7b:db:97:f0:4a:ac:48:f6:47:55:b0:e9:d9:
fb:f3:2e:63:ea:f3:b6:15:f6:0f:65:d8:2f:6f:7c:cd:54:19:
c2:f0:c1:a0:b6:3c:5d:1c:42:4e:70:59:e9:0d:78:02:4a:25:
67:c7:8d:95:22:4b:75:8c:85:e4:c5:89:e7:92:59:9c:79:1f:
b4:bf:12:39:c0:24:df:9e:83:f3:67:1b:70:9d:5a:c2:58:87:
86:57:01:4c:1b:6f:1c:0f:b4:fd:18:8f:a0:3e:da:68:7f:ba:
88:ae:14:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:11:36 2025 by rpki-client