Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer
File: d4fx5T6beBMt6aeHEQiDFt1gVbM.cer (raw, json)
Hash identifier: Qzlb7R+aYY3wI4EwlF9wp/Uvp0DC0Qe17cVV5PyWz1I=
Subject key identifier: 77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021E0B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 27 Nov 2024 19:30:04 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 7649
AS: 7655 -- 7656
AS: 7708 -- 7711
IP: 210.208.0.0 -- 210.208.95.255
IP: 210.208.128.0/18
IP: 210.209.0.0/18
IP: 2407:680::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 17:46:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138763 (0x21e0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 27 19:30:04 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91A60A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:8d:2f:8d:f5:ba:df:1b:e8:6d:a7:af:21:
4d:9b:5e:2a:11:cc:4f:97:7b:f4:80:38:8f:a8:74:
77:5e:d0:ea:ff:40:b1:3a:92:dc:6f:28:df:fd:ab:
7d:c9:04:2c:26:e2:41:45:90:b9:19:cc:a0:4b:67:
81:e9:55:4a:b7:01:0e:ef:29:ec:a9:19:4e:a9:9b:
9d:55:23:38:e4:58:15:59:94:5d:e6:00:b1:fa:46:
f4:18:1f:33:b8:3f:04:12:eb:01:ef:6a:a5:12:7d:
c6:8c:db:82:85:08:c9:43:4e:af:e4:96:26:c3:fe:
35:b8:3a:61:1e:24:dc:08:3a:33:ce:4c:90:fb:4c:
fd:f6:ed:e5:bb:91:64:8e:1b:ca:5d:df:b7:46:51:
ab:29:65:b7:2f:4b:8f:c6:26:19:4f:e1:a4:44:47:
29:83:89:81:73:f2:db:b8:b8:77:1c:19:0c:65:e6:
fc:38:1a:dc:ac:f1:c3:dc:7b:05:a3:1c:cc:2d:d4:
ca:a2:bf:43:6d:7c:2b:d5:bd:6a:41:41:af:29:7b:
4d:7a:fb:50:2e:fd:07:43:fd:33:e4:de:66:ed:77:
21:fa:0e:fe:0a:16:5a:94:ae:ab:05:b7:57:17:57:
fd:68:cf:cd:3b:e9:7f:03:48:95:33:44:c5:87:0c:
2c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7649
7655-7656
7708-7711
sbgp-ipAddrBlock: critical
IPv4:
210.208.0.0-210.208.95.255
210.208.128.0/18
210.209.0.0/18
IPv6:
2407:680::/32
Signature Algorithm: sha256WithRSAEncryption
6f:55:4e:f5:79:34:1c:be:cc:49:95:ac:c7:aa:7f:2a:48:d4:
ea:46:07:7f:71:e6:81:8e:ca:a1:74:55:dc:43:f9:41:39:96:
fe:25:8e:50:7d:83:18:8c:b7:cb:c1:2c:b6:87:3c:86:53:93:
11:47:5f:03:fb:89:a4:f0:74:14:99:72:3e:2d:83:ec:01:ef:
bf:4d:67:60:84:84:1d:3a:9a:e0:8e:1b:e5:a3:16:1d:bf:59:
26:c0:36:15:a8:33:05:87:f3:5d:4e:7b:91:69:6b:cc:32:b9:
1a:95:8a:60:c8:19:7f:ad:9b:38:3d:4d:66:82:c3:56:a0:6f:
cd:2d:cb:09:b1:74:f3:ca:4d:58:ec:55:c2:29:d7:7a:8f:5b:
36:24:61:2f:07:08:8f:d2:49:11:a7:47:67:73:1d:8d:cc:e6:
3f:f8:af:ba:42:c8:90:a8:54:54:a5:65:aa:fd:94:46:01:56:
5e:05:9e:76:1e:a4:f8:c9:e4:6f:a0:8c:05:09:6a:43:be:e5:
d5:31:be:54:dd:65:c3:16:3b:21:06:4a:13:e6:35:76:de:8e:
9b:4a:9b:9c:09:aa:80:55:09:a7:a9:b3:b7:51:48:28:36:98:
0c:9d:29:26:65:69:e4:f4:c7:de:3d:96:52:ea:77:65:4b:e4:
59:a9:20:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:26 2025 by rpki-client