Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer
File: cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer (raw, json)
Hash identifier: SCP5wBhfu94vaLopa5ZH9gBiBj+SLVXL57Q6/dw2ytU=
Subject key identifier: 71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0232DF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 24 Feb 2025 15:33:46 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 38036
IP: 203.190.0.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144095 (0x232df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 24 15:33:46 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91A759F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:64:da:57:5f:61:a8:0a:b0:08:c0:53:4d:
ee:d6:16:12:71:66:2f:47:a0:d0:9e:e1:97:52:c6:
1b:65:b2:0f:2b:6d:2d:d0:dd:ac:20:58:98:8b:64:
ba:eb:87:d3:1e:c4:d6:8c:3c:38:f6:ff:44:87:56:
3b:f0:26:6e:c9:11:dc:c0:72:f8:35:52:e7:fc:50:
2c:3e:22:e1:ca:ba:95:d9:c3:17:3f:29:33:ea:c4:
d3:52:dc:2b:dd:f8:18:d6:92:f7:9f:57:e7:e1:1c:
60:35:b0:83:98:92:38:b1:cb:bb:42:75:1a:9f:df:
a4:0e:96:90:40:a4:4f:ba:f5:08:c1:93:9e:77:15:
75:a9:46:bc:56:e4:66:81:eb:2e:a9:b4:0f:c1:89:
57:8c:3f:42:1b:2f:5d:a5:78:d7:b6:ac:b4:c2:ab:
03:22:f2:3a:af:bb:25:68:7a:1c:8a:3a:98:d8:76:
cc:d4:b3:d7:30:05:4c:b8:cd:62:27:c0:0c:32:12:
bf:25:a5:46:a8:d2:20:a3:4d:1a:40:3e:50:38:f4:
a3:66:7b:51:81:26:ba:7f:7e:1c:cc:03:b0:1e:26:
37:0d:7d:0b:10:df:d8:4a:ba:7b:a6:30:c0:28:ef:
1e:14:dd:af:1c:45:17:0d:1b:47:43:06:f5:3e:b1:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38036
sbgp-ipAddrBlock: critical
IPv4:
203.190.0.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:c7:56:08:4d:99:6b:3c:fc:eb:fe:b1:8c:6c:5d:56:05:a2:
8b:b9:40:92:a2:b5:a9:34:6e:20:57:c2:d2:d1:b5:50:d6:50:
43:95:72:d6:5a:9d:3a:7c:ae:9c:8a:85:f4:56:e5:68:f0:f0:
dd:b9:be:db:d6:f8:cb:e9:9a:de:1b:c3:01:5d:1f:8e:01:e1:
cf:5e:70:e1:a3:62:10:0a:89:4e:f3:f7:6c:f7:7a:62:f6:f1:
03:55:51:7c:61:3e:ce:4f:db:62:57:29:7a:da:da:d9:7c:8c:
7e:bb:a6:13:53:7d:3b:cd:12:8d:d5:f2:b6:31:d3:ae:4d:32:
28:7d:fe:58:ef:b1:60:ef:38:78:17:8d:0b:3d:cd:22:e5:22:
52:a9:c6:7b:27:00:c1:f7:e8:48:ce:dc:d9:50:46:34:ca:6b:
95:7a:f5:fd:56:79:8a:82:3f:f4:7e:df:61:96:84:ba:43:b6:
9a:6f:ec:23:21:8e:49:9c:d2:04:4e:96:d6:49:91:2d:67:11:
72:de:5f:55:40:b7:9e:1a:3e:33:ad:99:02:b6:1b:da:f1:ed:
3e:4e:6d:97:59:53:e8:06:1d:f2:fd:39:a9:e3:25:dc:c2:1c:
88:a0:66:c4:7f:96:f7:25:94:18:a0:bd:db:df:84:8f:f7:0d:
b2:cd:1c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:05:25 2025 by rpki-client