Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer
File: fzUqdpVtdwL8d69g_MEp5h_b6jI.cer (raw, json)
Hash identifier: OeboRgCuNQikNZFvBXXCaAB/PZK/SVbx+v+UGaxqS9g=
Subject key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0222D0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 15 Dec 2024 17:35:36 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 151989
IP: 115.84.168.0/23
IP: 2001:df3:1c40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139984 (0x222d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 15 17:35:36 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91E15AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:62:bc:8a:3c:84:7a:0e:e6:fb:5e:20:c8:
81:f7:df:2e:89:d6:4a:49:2a:24:9f:bb:f5:42:74:
92:15:6a:87:b1:14:67:45:d8:9d:61:63:80:3e:98:
16:12:0d:3f:36:e0:94:61:35:4a:68:ba:c2:63:cc:
84:95:74:82:bd:c3:bb:a7:ba:a1:79:f3:d1:2c:11:
82:69:e5:89:18:66:c3:63:6d:d6:43:b9:d0:0a:d2:
e2:e8:bb:23:3c:35:bd:76:ee:ca:5d:e8:d7:b6:79:
bf:93:fe:a6:f7:a4:79:b9:69:08:db:7c:81:ae:8b:
50:9c:40:2c:ae:77:5d:26:f0:4b:3d:e3:95:37:1a:
3e:9b:29:f3:2a:66:d4:5e:4e:cc:4a:b1:73:f7:71:
de:10:a5:2f:8b:7b:6e:e9:14:4a:2e:c0:80:01:25:
58:04:39:71:28:64:1f:dd:88:05:a8:5a:c4:a8:db:
ff:8a:68:34:5a:eb:a5:b9:76:97:00:2b:f3:d2:7d:
b6:87:98:9e:c5:99:62:17:84:ec:c1:77:c5:3f:a1:
09:e0:20:0d:27:f3:8b:4c:4c:bd:ab:b3:7a:4d:7a:
a8:5b:7a:e6:21:fc:9a:76:7a:0b:7e:f5:b6:30:fa:
e8:4b:de:bf:f1:0b:93:ea:7f:ce:af:ef:52:28:c8:
b1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151989
sbgp-ipAddrBlock: critical
IPv4:
115.84.168.0/23
IPv6:
2001:df3:1c40::/48
Signature Algorithm: sha256WithRSAEncryption
b4:8e:00:5b:6b:2a:88:9e:63:38:da:15:fd:7b:3a:34:fc:0f:
04:d9:01:af:51:fb:b1:b9:38:a9:7b:5d:44:63:6c:b6:c5:f4:
f5:48:c7:f6:61:ee:62:3d:77:bd:8a:3c:90:f8:04:c2:0b:83:
d5:fb:5a:60:b3:18:46:2c:04:04:b0:ee:70:77:9c:ae:a7:82:
c7:b9:c4:86:47:5e:24:9a:c5:e5:a9:ed:81:5a:fb:40:2d:03:
1c:5f:ba:4e:7f:e2:c2:e4:1b:7d:ac:f2:28:bc:ff:11:0e:8c:
23:18:32:9c:5f:33:25:71:e7:a6:80:e3:41:4e:ba:ff:4d:8b:
5e:aa:3a:60:76:2c:66:8c:b4:53:04:38:08:4e:b6:54:c2:54:
0e:5d:c3:6c:64:39:d2:43:09:1d:82:26:f9:7c:26:a8:27:b9:
7b:09:8a:4d:ab:a0:2e:6c:e2:d3:56:75:e4:50:9f:86:69:93:
39:d2:77:46:2c:30:46:a2:0e:c0:85:3e:ac:56:70:78:44:15:
d8:b4:bc:fb:cf:4e:9c:ea:78:f9:5a:dc:90:2d:96:03:5a:12:
85:80:ff:ae:fa:a3:8a:67:78:cb:38:6e:9c:9c:45:67:78:90:
16:5e:09:9d:17:98:83:06:a3:cd:4a:a0:7b:f8:da:30:d1:fd:
38:4f:6a:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:41:51 2025 by rpki-client