Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer
File: enhVXghERXV_vNAN3R10w2nLoLA.cer (raw, json)
Hash identifier: 4X7o+jYK9UgEQlIdJXhXHQ09f5+Y/pCliZ4VHmfwx+g=
Subject key identifier: 7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023AE0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 31 Mar 2025 07:13:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 141459
IP: 103.160.22.0/23
IP: 2406:e1c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146144 (0x23ae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 31 07:13:38 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A914E6AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:bf:cc:4f:64:42:84:49:6c:80:9c:af:ce:
bc:c6:e5:bb:7f:ea:d8:ad:c3:92:72:00:6c:84:25:
25:89:da:d3:25:a0:ed:3e:7b:87:ab:76:b0:c2:02:
29:ec:5c:71:54:aa:8c:19:20:d1:fa:26:26:64:7a:
f3:03:a9:8d:28:57:20:d2:d3:51:14:35:c8:58:47:
95:e1:d8:3a:15:af:61:ac:69:e9:d9:8f:6d:a0:87:
dc:77:ef:20:2e:03:af:43:be:b6:18:f8:f7:b1:e9:
83:04:87:30:8b:2d:85:ef:c1:69:c3:49:36:57:9c:
14:41:24:d7:7b:3d:b2:c4:fd:58:65:c7:31:67:25:
c9:21:df:55:bf:34:c2:fe:f1:1e:be:cd:55:07:a2:
f7:1c:76:2a:dc:27:69:d1:a2:ee:c1:9c:ad:bd:f4:
3a:cb:1f:bc:aa:ea:65:0e:06:21:5f:ad:cb:b1:49:
bf:19:20:23:2b:98:91:9e:3d:86:a2:fa:07:c9:71:
05:00:05:16:d1:5c:da:a7:2a:d9:f9:34:ee:dc:1c:
c5:e6:bf:e6:35:6d:09:fb:8b:36:02:d5:73:c3:d3:
9e:4a:f2:83:b6:ae:07:48:bf:1b:dc:2e:cb:f9:ae:
bd:8f:3b:9e:b1:c5:7e:f7:51:12:33:d1:9a:35:29:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141459
sbgp-ipAddrBlock: critical
IPv4:
103.160.22.0/23
IPv6:
2406:e1c0::/32
Signature Algorithm: sha256WithRSAEncryption
06:12:47:02:a4:82:9e:de:48:07:d6:f2:69:02:82:9f:3b:88:
46:2e:a9:bf:2d:78:62:8f:65:5f:de:a3:20:85:a5:e5:66:06:
e8:85:6c:3a:2c:a5:75:f1:f9:52:da:f9:c1:3b:45:02:26:dc:
7f:28:bb:f7:11:68:3b:a7:d4:af:84:3f:e6:c2:c7:5c:d9:a7:
72:1e:bc:54:7e:20:59:e4:e6:bf:46:6d:30:91:e8:03:a6:1d:
f3:50:5f:f1:84:b5:0d:3c:df:65:7f:41:cb:e2:05:37:a9:c0:
32:8a:93:ce:aa:ec:13:0f:a3:dc:8c:f4:13:3d:c6:73:0e:90:
b4:8a:2a:d8:45:cf:d4:29:86:97:dc:78:e3:e5:57:80:a8:46:
e0:c8:a3:b8:90:be:e8:8c:37:d6:4c:9f:bf:a0:96:16:af:1e:
80:23:36:80:ae:19:b8:61:70:56:f1:97:e4:95:71:95:a2:29:
58:b5:85:46:dd:9e:35:61:a5:4c:ff:89:72:9b:78:59:c0:3b:
bb:2b:46:d3:2b:7e:a5:9f:ed:44:56:4e:f7:bf:0a:b1:25:ba:
46:55:46:c8:8a:5b:76:7a:81:1e:86:40:73:c4:ba:1e:10:f1:
3d:37:d3:44:0a:f9:80:1d:5f:2f:fd:c5:8b:f0:e8:92:47:06:
23:84:19:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:37:05 2025 by rpki-client