Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer
File: hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer (raw, json)
Hash identifier: /5eW/ZWowoQnP+xZw9qPsu+Qd6StJt4gfEgxwfLcHSU=
Subject key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023695
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 10 Mar 2025 13:42:54 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 9542
IP: 103.149.40.0/23
IP: 2001:df3:f80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145045 (0x23695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 10 13:42:54 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A913345B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1f:c9:5e:1d:33:dc:a0:22:8f:02:fb:a8:4b:
a2:1c:85:ce:91:4d:a2:2f:e7:76:9b:aa:bf:b5:71:
65:58:52:99:9e:28:aa:8d:4a:56:d6:ab:c9:cd:b2:
c4:e2:0e:2d:83:c8:b2:4d:19:05:da:5f:fe:1c:9a:
4c:89:b5:e4:20:db:3a:83:f1:aa:67:f7:a9:b2:b3:
01:72:1a:74:45:a0:ae:89:e5:79:e5:3e:56:c1:c8:
4a:ac:7e:f8:91:7f:ef:a9:e0:26:02:e1:c9:34:a0:
d3:98:81:c4:35:3d:8f:f2:2c:87:30:2c:3d:d1:8a:
35:d7:68:8d:94:cb:e5:b8:06:76:13:c3:55:11:30:
71:89:d4:fc:9b:63:35:03:19:d2:d1:7a:18:3d:58:
4e:d6:39:03:b1:95:64:cc:7b:da:30:1a:e2:fe:fc:
95:19:97:de:89:51:ed:57:10:2b:ea:97:3b:6f:98:
8b:bd:8b:21:c3:79:88:27:24:56:2e:48:44:de:cb:
67:48:ad:85:2b:5c:08:3f:1f:c1:21:d8:5b:5c:0c:
fa:ff:fb:eb:fa:5a:8e:a2:89:26:92:b2:43:19:9d:
bc:46:16:99:8e:10:66:6c:02:d5:2b:61:0a:75:8a:
40:21:23:f4:37:0a:ed:fb:c4:7c:85:e0:ca:cb:15:
88:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9542
sbgp-ipAddrBlock: critical
IPv4:
103.149.40.0/23
IPv6:
2001:df3:f80::/48
Signature Algorithm: sha256WithRSAEncryption
84:97:15:85:0d:2f:e2:25:58:6f:67:47:c8:66:f4:ae:31:23:
a1:ac:8f:1a:ef:af:d2:ce:cd:ce:cf:9d:f0:19:52:01:aa:39:
42:89:30:a3:d4:d7:5b:74:ed:00:9c:17:0d:32:fc:73:ef:0e:
53:08:28:e8:7a:9e:1f:30:99:3f:c2:c8:cf:19:25:0c:6f:0b:
16:74:a3:d9:41:e1:c6:27:00:64:0b:d3:8b:9c:d1:7e:0b:07:
38:3b:e1:31:c7:77:c9:84:4e:60:19:16:5d:55:14:d5:8b:6c:
2a:94:63:ee:90:65:e2:ba:4d:0f:ba:b0:b1:27:9f:c5:74:3e:
36:e4:0e:c4:4e:47:0c:d1:92:fd:36:0d:d0:34:8e:a0:0f:c8:
40:32:c5:9f:a9:9a:25:7d:8c:63:98:5d:02:82:53:95:39:51:
bd:bb:2e:05:1d:16:9c:25:29:95:66:2f:93:2a:7a:9d:d0:07:
74:41:cf:a5:86:de:4a:a7:31:f2:4e:ec:c5:d2:fe:6d:1d:a8:
b1:25:74:7b:fe:f0:1b:70:b0:8e:0b:61:3e:c9:a8:1e:60:f5:
8a:07:de:e7:fc:e9:af:79:d1:2c:91:63:f4:83:6f:63:d1:8c:
92:9b:ad:6a:82:e5:04:e7:06:38:97:49:6c:0e:15:f6:02:e3:
42:4e:2c:95
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:06 2025 by rpki-client