Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKwrcgiF6COCTBln7fw2Psh0do0.cer
File: bKwrcgiF6COCTBln7fw2Psh0do0.cer (raw, json)
Hash identifier: kE47ThbZHToDYiMIjuULdzuWlHwSNr1HDWoAiKHhFGE=
Subject key identifier: 6C:AC:2B:72:08:85:E8:23:82:4C:19:67:ED:FC:36:3E:C8:74:76:8D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0236D6
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 11 Mar 2025 00:17:54 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 133951
IP: 103.49.204.0/24
IP: 103.93.19.0/24
IP: 103.112.46.0/24
IP: 103.114.231.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145110 (0x236d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 11 00:17:54 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91D5BA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:15:3c:ce:39:a0:0d:83:44:0a:71:b3:85:
e1:71:9f:d2:1f:55:ab:45:43:67:7a:f4:4a:03:6c:
d8:f6:e2:07:ec:4d:82:4b:e5:8a:d9:94:81:f9:86:
f0:29:27:16:01:6e:97:c0:f9:42:72:56:81:e0:5e:
bd:b7:0d:17:ee:b7:49:d2:5f:16:74:9e:7b:bc:89:
43:c1:fe:70:bc:18:02:2a:23:a7:31:12:c4:67:20:
a7:e3:04:e3:6e:6f:f5:98:7e:65:95:48:28:ab:92:
dc:6a:a0:60:23:2c:47:ad:b7:68:33:36:a7:a5:98:
22:ca:f1:29:23:f3:80:e7:82:39:43:b8:6e:71:03:
1a:39:7b:5c:73:d8:7d:b0:48:4c:5b:6f:c9:59:d2:
05:cc:76:21:f5:ef:c2:b8:ea:ef:90:67:8b:9d:bd:
3b:34:ec:9e:0c:0a:1b:f7:7a:b2:70:7c:bf:91:af:
78:94:a3:46:a0:e2:c3:39:95:04:c8:31:c7:43:6b:
3a:06:cd:1c:4c:39:b5:f7:74:d4:93:16:ab:4f:43:
76:5d:40:75:36:34:7f:fd:3f:c1:f7:6a:62:8b:46:
c7:68:cf:a3:73:f4:02:f0:67:db:15:48:67:11:02:
c3:fc:5e:c4:00:fd:15:19:af:6e:bb:8f:aa:9b:6e:
3d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AC:2B:72:08:85:E8:23:82:4C:19:67:ED:FC:36:3E:C8:74:76:8D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133951
sbgp-ipAddrBlock: critical
IPv4:
103.49.204.0/24
103.93.19.0/24
103.112.46.0/24
103.114.231.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:38:6b:68:75:aa:85:ee:cb:55:47:43:bd:de:5f:49:5d:2a:
13:03:af:5a:81:a7:41:da:4b:29:e0:1f:4a:be:2a:af:6c:e9:
00:eb:59:68:32:5d:77:b3:ce:1a:e9:c8:5e:8e:03:ae:23:cb:
f1:18:17:47:5d:4e:12:c7:f9:39:c5:47:05:23:35:f1:6b:1f:
2d:df:ea:dd:b7:f8:33:4f:51:b5:70:63:d1:d4:ea:73:60:36:
16:c5:7a:29:a1:c8:8a:13:ab:be:d4:66:68:a6:0d:6f:8f:fe:
66:0b:20:68:01:e0:ad:17:89:bc:cb:43:6a:09:15:d4:7a:73:
d6:26:f9:d3:69:60:82:d0:93:ee:8c:ca:3b:84:d1:ff:66:5b:
62:a2:fd:dc:c0:21:2d:b3:84:c6:70:7e:1c:87:40:35:11:d5:
38:30:b8:47:82:09:85:6b:de:8c:61:3a:f7:20:54:a0:c8:6d:
93:2a:83:d2:d3:5b:01:5f:96:42:9b:1b:37:3b:b4:12:bb:cf:
ca:6b:4d:a6:95:17:bd:7d:e3:a5:43:ef:f0:8e:1a:ba:62:6d:
c1:c8:2d:2d:06:a3:0a:4d:80:56:9c:ad:c6:d0:d8:2e:19:59:
6a:ef:0e:2b:61:16:47:60:99:35:19:2f:d1:b6:a9:8d:dc:72:
ba:90:01:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:05:19 2025 by rpki-client