Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer
File: i6wN0-SRhYlP2uKChO3IBHILRhQ.cer (raw, json)
Hash identifier: ID2y0w8JaiI79BLTjg/mS1ZuDlewsmAKF9sE8AsY1jI=
Subject key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02369B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 10 Mar 2025 14:34:12 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 7646
AS: 17972
IP: 203.11.128.0/21
IP: 2402:6f00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145051 (0x2369b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 10 14:34:12 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91EBFAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:e1:10:30:e9:07:30:b0:ce:cc:e6:b2:f3:
0c:1c:3c:c4:f7:7d:a0:17:1b:9e:eb:e2:f0:56:8e:
49:64:84:59:be:b2:f6:24:79:b3:73:c1:63:7b:dc:
1e:7e:57:a4:e8:6c:de:67:65:0d:c0:8a:c8:77:36:
6c:dc:22:27:aa:be:28:e5:bd:2b:91:4b:3c:3d:f3:
b6:07:96:89:6d:d3:dc:fd:2d:28:80:41:ce:b3:d9:
bf:8d:52:60:d4:9d:9f:84:db:a1:03:7e:e2:fb:74:
51:5b:4c:95:8e:f7:7f:b9:f0:f5:5a:b7:b0:49:f3:
f5:95:46:da:81:79:82:85:74:19:a4:19:67:5b:bb:
0f:79:48:0f:3e:d6:a0:9d:29:bf:9b:21:df:51:cd:
d7:0a:e0:d8:54:7d:63:1e:01:de:35:8e:9d:0d:3f:
fa:c9:6a:25:41:f5:f4:ec:c0:eb:ba:8e:d3:e9:58:
06:69:a7:63:fa:66:84:d5:ca:72:98:4e:cb:de:5f:
04:62:2a:01:47:13:df:b0:a5:a0:18:32:5d:2b:4c:
60:81:f7:18:64:f6:e0:18:5e:1d:6f:b1:51:02:88:
87:8e:f8:28:06:9c:be:48:64:1b:be:43:2a:73:37:
68:37:5e:67:d7:44:53:12:44:26:a7:45:ab:24:ee:
9d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7646
17972
sbgp-ipAddrBlock: critical
IPv4:
203.11.128.0/21
IPv6:
2402:6f00::/32
Signature Algorithm: sha256WithRSAEncryption
c2:af:5a:d6:0d:ba:a0:73:20:52:63:20:c1:95:79:5b:0a:17:
04:e7:f8:3c:09:17:09:ae:0a:00:fd:90:49:33:c3:ec:37:09:
58:7c:8c:31:96:21:7b:e0:67:bf:3b:b0:2d:29:a3:58:e9:44:
f0:25:82:e2:01:e5:4b:1b:78:95:66:fe:a8:5f:a4:f1:3d:db:
0e:d1:5c:02:09:e1:16:43:cf:27:63:57:01:f2:0a:34:e1:da:
b8:a8:25:f4:e4:53:cc:81:c3:b3:4e:63:4f:85:0b:20:2c:f3:
63:be:9d:9f:78:ca:02:cb:55:b8:0e:a9:db:98:fc:b8:78:01:
4e:7a:51:a1:99:9f:a1:f3:16:a7:29:89:3a:00:64:a4:56:9b:
73:6e:dd:eb:8f:8d:94:8a:56:dd:dd:35:fe:9e:0a:b4:cc:ba:
0a:0e:3b:77:17:71:8e:f4:8f:6d:15:53:d3:9f:4f:08:3f:a8:
48:e2:87:c5:85:c1:20:45:c9:63:ef:fa:0f:64:9b:b6:b4:70:
6a:0b:54:f9:1b:c0:09:df:ae:03:93:52:84:5e:cc:f8:74:1f:
01:9c:71:f8:d5:37:36:13:e5:3f:ad:93:a4:b8:26:dd:b0:db:
36:18:f5:f9:ef:f3:f0:aa:5a:a7:ea:a0:b4:6b:82:4c:78:83:
65:26:a5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:42:00 2025 by rpki-client