Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gtgYhh3Upw93CNIF5LiehRTKH2w.cer
File: gtgYhh3Upw93CNIF5LiehRTKH2w.cer (raw, json)
Hash identifier: X+b1yuo4W/N9FwAyVEYNisB3aL9dK7gDoXlQtvQFFfs=
Subject key identifier: 82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022C0E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Jan 2025 03:23:58 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: AS: 135594
IP: 103.67.165.0/24
IP: 103.152.4.0/24
IP: 2001:df3:4a00::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142350 (0x22c0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 29 03:23:58 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91C9A8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:29:b8:58:95:2b:f0:84:00:c5:e6:48:a1:10:
f5:b1:ba:4a:54:48:cf:df:6f:5c:68:89:ae:92:5a:
df:de:bf:33:17:a0:23:2a:2f:8e:16:74:cc:fa:1e:
d8:af:61:9b:6a:8c:c5:36:61:d7:14:8c:df:07:90:
1c:65:0e:c2:83:40:c5:3b:77:5b:55:f9:83:fb:5c:
79:34:90:a5:1b:ea:9c:fa:36:f9:e5:8b:2b:e6:38:
f8:28:27:39:09:2b:ac:c3:2e:ec:b1:ca:9c:81:ba:
58:d3:54:1c:b3:6b:f0:ab:16:5b:42:6e:3d:8a:8e:
f1:e7:7c:c8:3f:a4:33:b3:d2:75:a3:0a:12:cd:1f:
05:b2:33:f1:01:0d:95:2c:cc:72:ea:19:68:f1:89:
fc:cd:c5:5d:51:e4:ea:fc:0b:f3:8e:43:69:11:98:
e8:5b:aa:f1:5e:26:c1:c4:9c:8e:df:9c:e8:0e:79:
61:f2:9d:cd:5e:6e:2b:f5:d2:cf:f4:b2:59:28:94:
d1:ae:fd:ac:7b:2e:56:62:83:79:02:8d:83:c8:c7:
e7:dd:ea:a5:72:90:34:5c:43:6e:e1:f3:f8:5e:34:
d8:16:ab:3a:15:74:03:2f:24:b6:70:e7:14:07:3f:
2d:97:c8:23:bf:fc:d8:a4:5a:d8:65:65:d7:a6:0f:
0c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D8:18:86:1D:D4:A7:0F:77:08:D2:05:E4:B8:9E:85:14:CA:1F:6C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/gtgYhh3Upw93CNIF5LiehRTKH2w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135594
sbgp-ipAddrBlock: critical
IPv4:
103.67.165.0/24
103.152.4.0/24
IPv6:
2001:df3:4a00::/48
Signature Algorithm: sha256WithRSAEncryption
d6:3f:5c:e5:05:67:24:5d:9a:22:89:c0:d9:48:c9:6e:7b:f6:
bb:2f:42:80:b1:f8:22:e4:1a:bc:1d:bc:e4:4f:41:16:a9:e1:
2f:d9:d4:a1:4f:db:09:90:a5:43:07:02:d9:ef:25:0c:98:59:
61:38:70:e5:62:95:b9:f3:79:92:3d:f4:4a:b3:9d:b1:be:11:
15:47:78:7c:15:4d:b4:e5:e7:79:1e:de:6c:6c:67:d6:40:43:
7d:a2:e3:15:e6:a1:c6:c1:a1:0b:33:7d:88:2c:6e:8f:99:fd:
45:d4:f7:88:0d:2b:de:6e:76:a7:67:3e:c7:83:d6:65:63:cb:
41:f6:e4:8b:ff:82:0e:d0:87:41:a3:1e:ce:a6:14:18:ac:f8:
d7:0a:6e:1e:d9:62:9c:03:11:06:87:d3:b7:a9:98:36:68:da:
76:b2:fa:02:f4:40:eb:50:34:ff:00:03:f1:08:84:cf:ba:10:
bb:c5:6c:85:82:94:36:17:f0:f3:48:c1:a6:a4:10:8d:cf:2a:
8f:4d:2d:38:cc:0a:d7:a7:17:c7:16:0b:df:e9:ff:bd:c6:e1:
13:77:cc:38:a7:91:5a:32:1c:b1:4d:3d:68:e1:4b:9c:01:a3:
82:f0:83:58:6b:39:4e:1d:48:12:d0:20:59:36:e9:da:9f:0f:
8c:ce:a7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:05:14 2025 by rpki-client