Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer
File: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer (raw, json)
Hash identifier: dqp+MQ7WWb7lbum92vV8thuqmSUQOwBUpMS5YiLYgLQ=
Subject key identifier: 72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0220B3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Dec 2024 01:06:20 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 63945
AS: 137068
IP: 103.43.144.0/22
IP: 103.103.182.0/23
IP: 2401:f680::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139443 (0x220b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 5 01:06:20 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A911923C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:c6:55:89:a2:64:2f:6a:54:e1:ee:69:17:
f6:77:db:70:06:f9:b2:cf:28:4d:17:45:ba:57:ec:
bc:a6:9d:ac:f0:95:26:a0:77:a8:32:96:3f:17:95:
06:eb:43:53:1e:39:76:af:74:59:78:0f:f5:53:f6:
97:e4:a3:ba:14:fe:7e:58:13:52:6d:9f:ac:7f:04:
f4:35:af:58:7a:d8:02:26:94:c5:d0:fc:b8:cf:74:
25:40:90:38:b3:b6:51:78:83:e3:5e:64:6d:cb:f6:
87:b6:1e:5e:af:03:ae:88:4a:db:8d:49:6d:31:38:
5e:14:07:0e:0e:a0:09:c1:55:4e:5a:39:ca:5f:a4:
b7:8e:0c:30:c7:f0:79:ef:b4:54:2f:1a:df:d7:1d:
34:5c:d0:0f:19:43:35:58:fb:a3:66:1d:20:a7:ce:
59:1a:e1:14:2c:59:4e:28:35:af:2f:eb:c2:72:67:
3d:40:84:56:7b:09:43:cf:b8:c6:5c:dc:81:8c:94:
3d:8e:7a:ca:73:e3:0a:dc:fc:66:5d:b2:b1:be:38:
a0:4b:7a:ad:2e:4d:7c:78:52:b0:c3:9d:db:2b:63:
92:43:af:b2:7a:22:9c:ee:27:43:a2:dc:4d:77:b1:
93:6d:f6:63:c7:35:3f:e4:92:4a:e6:a4:5f:d8:75:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63945
137068
sbgp-ipAddrBlock: critical
IPv4:
103.43.144.0/22
103.103.182.0/23
IPv6:
2401:f680::/32
Signature Algorithm: sha256WithRSAEncryption
bd:6c:34:7e:07:f5:58:ab:47:02:62:b2:02:9b:ce:97:47:bd:
4b:31:08:5b:62:89:78:7a:30:0f:5d:94:e4:e1:7b:28:0c:d4:
ed:a8:cc:eb:87:82:e7:0a:e9:49:d3:71:c7:05:1a:bd:5e:c2:
c4:08:0f:52:87:f3:ba:ad:f4:30:c7:84:f5:48:47:39:4a:ce:
c5:77:1d:8b:31:fb:85:05:5b:b9:70:1f:80:70:62:d4:62:09:
46:83:00:3e:94:81:bb:6e:82:8f:8c:c4:d9:5b:eb:06:66:15:
18:9c:d0:d9:47:71:4e:c2:f9:48:6d:32:c0:e9:35:64:cb:5e:
ac:21:a6:fa:c1:e2:5f:25:12:96:b0:98:2c:9d:7b:31:a5:16:
7f:0a:a3:d9:b1:00:7a:32:02:48:63:c1:ea:88:01:bd:8f:25:
64:78:73:50:7e:51:1a:0d:a6:bb:75:c7:f0:77:0a:ef:a4:e8:
8d:a0:f8:3f:5c:c0:3f:09:ba:e9:07:81:0f:0d:0c:0d:63:d8:
ad:90:82:b3:f5:0c:05:cd:05:32:42:54:58:c2:70:24:f1:8c:
ad:a2:94:be:f5:93:34:60:26:54:22:56:03:60:1f:6f:f6:9c:
6a:5b:d4:9a:26:c2:a8:6c:d8:0d:e3:24:70:b4:33:df:27:e0:
93:05:19:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:07:00 2025 by rpki-client