Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer
File: cJdlx9TTMfTDasa-NH-mah8CNJA.cer (raw, json)
Hash identifier: wN1abysLtMX2UJaD+RMOXxh7gBvu5PFWD6mEvOaFqCI=
Subject key identifier: 70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0228FB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 13 Jan 2025 18:26:00 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 23905
AS: 131193
AS: 132003
IP: 103.10.233.0/24
IP: 103.196.108.0/23
IP: 202.36.141.0/24
IP: 2404:2000::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141563 (0x228fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 13 18:26:00 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91AE85E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:91:a4:3d:29:52:ae:cd:21:15:2c:20:f0:
ca:f6:9d:92:09:16:ca:e6:c6:3d:55:66:91:61:d0:
06:74:9a:7a:ff:da:0a:e2:f7:08:c5:87:f0:ff:0a:
18:a3:0e:d8:36:3f:ec:9b:03:26:7e:2d:da:82:06:
cd:4f:78:8a:41:97:8b:a8:72:26:42:23:38:80:02:
08:49:fe:c0:64:82:5c:c9:56:23:50:66:79:15:41:
d5:cf:0b:c0:cf:98:b4:1f:6d:24:7f:82:dc:e8:7b:
8f:93:91:43:af:aa:5d:a1:93:c1:c4:40:e2:87:ee:
9b:09:02:c5:0f:60:2a:71:42:c4:32:b0:9a:68:a0:
97:79:bd:04:4e:6c:cf:66:f1:6d:7b:78:93:c9:27:
c6:00:79:ee:12:1c:82:89:09:e1:34:35:6b:af:7c:
2a:38:10:9f:0a:18:75:78:12:75:28:1c:87:c7:96:
25:1b:bb:f3:86:9a:d3:db:f4:96:3e:b2:21:72:3a:
01:b9:b5:36:06:66:db:3b:2a:c1:d6:19:fe:df:8e:
b2:fc:db:6a:1a:19:5c:1a:8b:0b:6d:b1:96:19:6e:
c4:08:55:b5:1d:d5:7a:62:d0:73:1e:37:da:fc:b9:
1b:b0:6e:18:47:7c:4c:de:fb:de:6a:c4:f7:b1:9f:
cb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23905
131193
132003
sbgp-ipAddrBlock: critical
IPv4:
103.10.233.0/24
103.196.108.0/23
202.36.141.0/24
IPv6:
2404:2000::/32
Signature Algorithm: sha256WithRSAEncryption
d6:64:89:4a:4b:3b:4a:ba:c3:ad:40:f3:e7:40:08:05:40:b0:
6b:b4:58:dc:86:fd:df:ae:21:5c:38:61:40:f3:0b:40:bc:3b:
91:19:b9:42:5c:a1:81:59:46:bf:63:76:06:9a:77:61:bb:e4:
b7:b0:68:5b:e3:0e:95:1e:e3:57:de:bb:ac:9e:d9:50:a3:18:
51:2f:87:3a:4a:aa:c2:d0:0b:3c:7e:96:8b:07:c6:da:ba:cd:
0a:f2:0a:62:bc:d9:4d:ab:de:19:5f:e9:88:b5:04:3c:4e:e5:
7f:9e:e7:b9:d4:f1:cc:77:9e:a2:7f:4e:a9:b7:9f:4f:74:e2:
82:41:fb:cd:6d:70:22:f9:47:fb:d7:c2:24:d4:f8:98:05:ed:
e9:9a:eb:8a:4b:ae:b1:87:4c:ca:9e:dd:41:10:07:85:b1:4b:
ae:1c:6d:a7:e1:1a:24:9b:32:e5:86:13:80:fd:d2:9d:3b:02:
db:6f:d4:5b:5d:a1:f7:0c:8e:b6:0b:81:96:c3:2e:a1:08:e5:
b5:31:70:93:72:62:41:2c:1f:4c:a4:cf:bb:3c:87:17:a0:8d:
ab:0a:6b:fd:24:a7:95:f0:47:dd:8c:67:06:10:17:e2:99:81:
d9:70:52:34:f7:f7:fa:3e:27:66:17:ce:be:ac:33:7c:dc:47:
56:e2:96:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:12:35 2025 by rpki-client