Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer
File: dddb2lG8oAYPcIETI0xBReREQho.cer (raw, json)
Hash identifier: e0TlaqHHgilvMKKL1BSCn89vgeiInOO+zomnWPiNISM=
Subject key identifier: 75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021FB7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Dec 2024 20:40:36 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: IP: 103.130.244.0/23
IP: 2001:df6:f300::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139191 (0x21fb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 2 20:40:36 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91CBB48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:91:78:c4:c3:34:d3:84:5b:25:26:e0:00:4e:
ef:86:32:29:9d:60:4e:b7:e6:d1:b5:c4:79:bc:fb:
ad:3d:ea:dc:71:b1:0f:11:c4:d9:64:d7:84:8f:52:
bf:c6:9c:2c:52:b6:17:77:6c:00:7e:5b:a7:7f:b7:
47:f8:f8:4e:89:7a:dd:26:7e:76:a4:5b:68:32:62:
ca:a3:98:87:9d:fc:5c:c8:8d:ab:fa:18:85:db:5d:
34:d8:65:ae:94:66:d2:a0:d5:28:1c:1f:1f:ca:bb:
be:09:3a:fd:b9:20:30:c9:79:82:89:17:04:83:13:
ed:ab:89:ae:ed:34:11:8a:6d:85:f7:92:b1:3a:38:
85:d8:ca:39:24:6f:49:8c:22:f0:29:8e:7b:e6:89:
df:51:91:76:0c:eb:89:32:0b:9d:ae:37:e8:e6:f6:
45:d6:52:71:34:dc:b8:c8:f1:e8:70:58:d5:f0:ef:
7f:2b:c1:24:bb:da:53:a6:a8:f9:01:db:1f:c3:31:
13:81:d9:ff:63:05:dc:63:f2:9b:9c:62:37:7e:85:
b2:ea:92:22:7f:fe:5c:1d:59:79:e4:b9:66:17:53:
dd:cd:b5:25:85:41:aa:02:1a:ae:41:d1:41:6b:82:
29:00:f7:4f:81:cd:6c:ef:a5:88:57:81:52:5c:5c:
00:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.244.0/23
IPv6:
2001:df6:f300::/48
Signature Algorithm: sha256WithRSAEncryption
0d:59:1b:77:40:71:c9:27:ce:5e:e9:91:5a:d3:f4:1a:17:83:
27:8c:93:72:a1:a3:93:f9:43:45:f8:1a:8c:da:6d:bb:bc:e9:
95:97:e5:69:e5:84:36:62:3c:b0:40:9b:5d:bf:4a:8b:48:cf:
87:7b:33:2c:8b:29:38:66:62:1c:c9:6d:e7:60:39:b3:13:ca:
11:74:b1:79:e6:a8:35:d4:e9:3e:32:ee:c8:5b:2b:4f:ef:84:
52:2b:ac:cb:20:97:62:6f:ca:3d:81:8d:86:f5:60:81:af:f5:
7f:46:92:b4:ae:53:ed:ef:5e:b0:95:9b:39:78:12:57:0a:c0:
c8:e9:cd:31:73:71:f9:0f:4e:0b:9f:e5:94:ec:be:60:19:70:
fb:b7:59:e1:f3:75:f7:a3:ad:cc:0e:0e:af:ac:35:ff:64:7c:
7b:93:cc:c6:94:3d:eb:a9:51:21:25:58:a3:3c:cf:50:2e:06:
86:c6:52:7a:81:27:e9:d0:1d:b0:bb:77:93:0f:ca:97:de:8b:
f8:15:c3:01:c0:64:ae:8b:76:8a:31:cf:3c:4d:e4:7a:7f:07:
b2:cb:92:a8:b9:af:23:78:6c:f3:ef:c5:dd:39:54:56:b6:d2:
ee:68:5d:0b:23:9d:19:2b:78:e5:16:4b:aa:5f:cb:e4:52:b4:
0c:18:69:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:04:38 2025 by rpki-client