Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer
File: e8dWLzeFS9JjniQQ1nPld8v7MR8.cer (raw, json)
Hash identifier: WMXz1fSUAQhTsWJfnkznoO3iRp8jXsJ1wfzk6QpmGBo=
Subject key identifier: 7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023195
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 17 Feb 2025 03:07:57 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 153606
IP: 163.61.144.0/23
IP: 2001:df5:17c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143765 (0x23195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 17 03:07:57 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91C36C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2f:fb:16:4c:d1:91:7e:27:a0:81:b7:13:22:
4a:82:8d:74:39:3b:88:6f:1c:31:b6:7f:97:9f:3d:
68:cf:19:f0:3e:a2:18:48:25:9b:72:da:4e:25:6a:
cd:58:6b:d6:33:b2:a2:f8:26:25:bf:20:0a:89:09:
1d:0d:75:92:b7:98:01:9d:e2:e4:0d:dc:08:2b:32:
62:39:b6:c0:98:a6:e0:36:5d:60:6b:76:b5:12:6e:
4b:27:10:70:f3:fa:45:f7:4d:c7:f8:94:0f:68:20:
c8:26:fb:30:85:6d:0f:7c:f7:9c:72:08:63:a6:05:
86:cf:8f:1b:3f:0a:20:b9:df:49:71:0f:84:e6:c9:
3d:0e:ce:32:09:b1:fd:c1:bd:06:39:33:81:f3:ef:
6a:4b:23:8c:49:3f:3d:2e:70:e2:bc:42:6f:a1:db:
a3:59:fd:1d:5b:04:56:ae:92:86:ff:d0:80:fe:4e:
90:5c:2a:cd:d8:64:05:d0:31:ab:12:1e:fe:0b:fe:
b4:b0:d9:31:04:56:0b:2d:8b:6e:4e:f0:38:e5:61:
61:9e:f3:6f:ed:91:a1:48:17:82:b6:7d:95:ab:2e:
d8:10:ce:bd:55:14:21:07:d9:01:a8:db:ca:a7:85:
ee:30:cb:e1:15:26:f7:c0:e6:ec:a9:5a:30:95:1f:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153606
sbgp-ipAddrBlock: critical
IPv4:
163.61.144.0/23
IPv6:
2001:df5:17c0::/48
Signature Algorithm: sha256WithRSAEncryption
19:17:26:c3:35:d6:29:2e:0a:71:8b:9f:db:0e:84:cd:5a:49:
e7:30:5d:0f:bc:5a:72:cd:08:40:50:f9:02:ab:7f:3f:5e:2e:
4e:0b:30:1c:c6:c6:6c:0f:c9:2c:05:fd:41:6b:50:57:08:4e:
d3:07:aa:9a:16:2e:dd:71:c1:47:a0:d4:e2:7d:83:85:14:8a:
b6:39:86:69:a2:ef:c0:5d:a1:47:86:43:4d:e6:ad:2f:c6:28:
f2:60:6c:00:80:a5:3b:30:37:55:48:51:a4:c1:1e:f4:be:1a:
db:c4:34:37:7c:79:4a:06:2b:7d:8a:f2:04:78:7b:a8:c6:4c:
36:39:38:28:dc:24:58:9f:2b:b7:16:f6:f6:7d:5c:db:4b:6e:
0e:32:85:b1:67:29:e1:52:1a:c3:2e:d6:e4:cc:c0:d1:c9:4e:
e4:15:c3:5b:2d:3e:36:42:44:ea:7b:35:0d:e2:40:c4:11:17:
a9:ff:c6:b9:3d:08:6f:1f:72:7f:65:31:1d:80:4f:24:96:bb:
cf:f1:1a:0c:dd:42:68:ed:f7:1f:78:38:48:be:c8:56:fe:5d:
5f:ac:54:bd:90:0d:54:e1:d4:1f:90:6c:c2:d3:e7:03:34:fd:
50:4d:45:01:c4:76:35:76:d7:cc:95:9e:9d:0d:d1:9a:26:92:
14:c4:af:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:17 2025 by rpki-client