Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer
File: aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer (raw, json)
Hash identifier: i3UP5mmZV1Q80Qcmiw3LVoUW/Tc7jCC9iYQOFwyhX98=
Subject key identifier: 69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02362B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 07 Mar 2025 07:14:51 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 135357
IP: 103.20.192.0/22
IP: 103.30.4.0/22
IP: 103.226.152.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 17:46:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144939 (0x2362b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 7 07:14:51 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A9141274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:d3:66:26:4f:d4:84:88:eb:c1:dd:2b:eb:d1:
91:c4:b3:ea:6a:22:f4:53:10:79:a1:c4:f0:e7:54:
53:b4:38:df:00:0b:a8:86:00:be:a5:e6:bd:26:73:
ec:df:9d:9d:b8:ed:1e:2d:6a:04:86:fa:a6:0f:78:
10:5f:e7:ca:ed:1c:36:d9:ff:a8:a3:18:6a:07:c4:
4d:0b:e5:ab:b8:8a:c1:3d:b1:a0:9c:ae:d3:9b:84:
3b:98:ad:b0:a4:7d:ad:38:11:c0:59:31:22:9a:22:
a0:6a:17:1b:80:2e:79:6d:81:30:d2:56:71:df:25:
2f:d2:a9:94:db:c4:7f:05:65:6a:56:a3:cd:53:ce:
51:cc:a2:1f:5d:9f:40:3f:2a:ce:59:61:f1:78:46:
db:37:5a:b3:1b:0e:1b:ab:3b:97:91:0f:1e:9a:74:
3b:bd:61:60:cd:87:47:4d:ae:f8:34:c8:26:90:97:
d8:06:a9:fb:e5:14:a6:08:ba:53:1d:ed:24:47:bd:
c1:71:4c:b3:14:27:1f:f3:c3:b6:8a:7c:62:bc:a1:
48:08:2d:5c:9a:7b:f9:4e:3c:04:7d:af:a4:80:cd:
65:6d:bf:c4:ff:ad:69:bd:49:d3:b3:6d:89:8e:eb:
14:56:b2:1e:ce:8b:25:c5:4e:fe:c8:88:66:2e:7d:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135357
sbgp-ipAddrBlock: critical
IPv4:
103.20.192.0/22
103.30.4.0/22
103.226.152.0/22
Signature Algorithm: sha256WithRSAEncryption
95:d4:1b:a6:40:32:45:35:34:cb:a7:b4:fb:30:4f:32:78:ac:
dd:a0:dc:51:de:8c:e3:53:68:14:7c:57:ca:e5:45:f1:36:54:
c8:49:c9:9c:b2:5f:91:82:15:a4:94:12:7e:c1:d8:c9:ea:34:
0d:fd:0b:74:b9:bc:f5:ad:13:04:c8:2f:6c:44:c2:96:92:9a:
64:64:16:5e:77:14:0d:9e:66:42:75:5d:1d:2e:57:90:2b:4c:
db:00:20:68:f8:9c:b8:ff:92:0c:95:ea:d2:16:d4:61:d6:cb:
b0:2c:93:93:27:0d:12:9d:9c:35:02:d9:68:6d:da:de:97:9b:
e5:ab:72:70:b4:cc:da:32:d3:36:43:7c:28:ae:b0:b4:a7:d5:
46:4d:8b:ec:aa:2d:36:c5:ba:8e:42:aa:a8:fb:03:07:48:62:
36:19:26:9b:01:ef:66:fc:1d:6e:69:a4:18:bf:21:12:03:35:
48:f1:5d:ae:87:cf:77:0a:08:f8:0c:f0:6b:92:a7:cd:fa:c1:
12:a0:fd:fe:d7:2a:f2:d1:9c:1b:2a:20:be:73:ee:c2:24:83:
cc:51:34:92:d9:35:41:be:21:f5:2e:23:78:77:21:98:35:89:
b6:04:ed:54:d8:97:a2:e5:04:e0:ba:c0:fe:ad:89:1a:81:eb:
e1:83:20:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:02 2025 by rpki-client