Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer
File: fBMe4KgLg01I0X1pZVpbx75mi2o.cer (raw, json)
Hash identifier: Ta6rF3gEzOakHDskQEHYYESdIRj/2fWOdqI4ozxotR8=
Subject key identifier: 7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022CB8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Jan 2025 18:46:29 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 149295
IP: 103.177.242.0/23
IP: 2001:df0:2dc0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 20:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142520 (0x22cb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 30 18:46:29 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91637DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:51:a2:02:b7:fc:7b:b0:d8:6e:02:bb:ef:
b8:07:f0:a2:4f:e5:03:86:8f:5f:12:0f:ae:89:ed:
24:63:6a:61:63:d7:ff:fc:ac:e0:d8:1f:69:75:27:
f4:d1:89:8c:b5:39:0a:2f:8a:ee:57:b1:23:7e:5b:
d8:13:33:50:8b:1c:bc:fb:7e:e3:1e:37:c9:e5:dc:
d0:98:c0:56:ad:ac:a1:4b:f4:0f:af:e2:9a:33:d7:
af:b6:c1:e5:d5:2a:fc:92:b4:45:09:08:58:0a:96:
0b:3a:4d:41:04:04:2c:1d:82:1c:8e:87:fe:4f:24:
63:31:b3:be:4e:b1:d5:64:12:1b:8f:14:fd:30:11:
c0:30:a2:c6:ef:8a:02:ed:a2:48:e9:f1:66:7f:db:
4e:78:ac:8d:c8:ac:58:c0:b5:6c:37:e2:62:d3:12:
91:61:f1:54:38:e2:83:9f:ae:64:94:93:de:15:54:
34:a0:41:31:50:a6:cf:98:67:82:04:70:60:4b:4c:
90:f4:c8:29:ac:01:8a:6e:5e:9f:18:78:4e:82:cb:
fb:39:cd:d2:03:a6:37:0c:fa:a2:e9:77:67:9e:cb:
0e:4b:55:3b:e6:19:dc:e7:a6:67:a9:fa:69:5d:cb:
74:1a:63:fa:84:d0:0b:4f:54:02:71:a2:3e:10:93:
ba:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149295
sbgp-ipAddrBlock: critical
IPv4:
103.177.242.0/23
IPv6:
2001:df0:2dc0::/48
Signature Algorithm: sha256WithRSAEncryption
b7:16:23:44:d0:c8:71:d9:31:2c:d3:87:e1:55:5a:d8:ca:9e:
7c:18:25:c5:2b:c0:03:db:97:89:79:73:c2:5b:cb:28:f0:be:
16:cc:b3:76:c7:1e:6b:2c:10:59:b9:27:5f:04:c8:e3:11:16:
4b:47:0d:84:bd:00:56:41:3e:e0:f1:a9:8a:79:62:54:f1:6d:
ec:95:d5:f6:3c:ff:5a:9d:be:42:92:25:6a:69:48:5c:fd:24:
9e:b4:24:0d:f7:52:4f:39:4b:ae:ed:c5:d9:56:d5:2a:6b:c2:
aa:eb:43:4a:4d:c4:5b:bc:8d:a7:24:db:f6:dc:b1:e5:a3:7b:
6e:b8:80:21:b6:c4:63:39:c2:c5:4d:5b:e8:b5:b4:9a:bc:19:
72:98:69:28:56:f7:74:13:40:a1:c9:45:07:22:93:9e:6e:ec:
0d:33:49:65:f0:b3:a7:4b:2c:3e:0b:4e:eb:22:82:39:41:56:
e8:22:11:6c:cf:e3:30:4a:af:13:64:cb:5a:2c:23:6b:9c:ab:
28:df:07:fb:98:c9:2d:57:ed:74:9c:34:ea:62:ce:12:69:3a:
0f:35:6b:8a:05:de:33:df:29:8b:e9:4e:a6:cf:d0:39:e4:a9:
6f:84:6a:a9:4f:53:cf:05:b5:4d:27:71:ab:8e:ec:f2:33:f2:
52:f6:c8:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 22:20:29 2025 by rpki-client