Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
File: iOe1QfQimNbptRZdllJGzBzB9aI.cer (raw, json)
Hash identifier: AQMNpuHQ5D1hbR84ZtWCiijvVFq5hIE7JSE7xPFyo/I=
Subject key identifier: 88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023409
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 28 Feb 2025 18:27:01 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 138575
IP: 103.133.140.0/22
IP: 2404:4d40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144393 (0x23409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 28 18:27:01 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91A9D0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ee:33:ed:59:7b:50:8a:19:f5:73:77:ec:2d:
29:d1:bd:ad:6c:e7:e5:55:e8:d0:86:f9:eb:17:47:
70:3e:17:6e:b3:97:13:8e:40:f0:e4:2e:bc:83:37:
24:a1:2b:90:f7:e7:e0:2d:07:31:a5:f0:f6:d1:dc:
dd:46:58:38:ce:44:69:6a:39:ab:01:9f:9e:91:aa:
0d:bb:01:8e:10:77:7d:0a:97:0a:09:b0:48:c8:e3:
89:d3:5c:1a:01:dc:79:74:f5:9d:a2:ef:f5:cd:74:
85:91:c0:76:62:c6:92:53:81:ef:d1:f1:7d:27:cc:
82:c1:76:8a:0b:36:10:dd:8c:e4:81:f6:e3:68:da:
cf:65:82:79:d6:30:35:53:5d:e7:97:30:eb:17:22:
1c:4a:cb:f1:8b:0d:2b:30:37:81:d4:67:cd:78:4a:
fb:f2:08:ec:5d:fb:e4:30:a6:ae:aa:b1:59:4b:ec:
ea:6c:85:c3:62:13:c7:6c:0e:28:69:9d:a9:98:99:
aa:2a:73:e3:c9:83:92:6d:da:d7:d3:ef:14:f4:38:
b2:eb:8a:ba:70:a6:6a:2b:65:ed:a6:ed:92:a7:23:
46:ce:05:7a:fd:70:16:f4:ae:09:1e:97:17:44:04:
cd:ca:2c:98:22:9d:44:a2:54:c0:33:68:e7:0a:85:
16:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138575
sbgp-ipAddrBlock: critical
IPv4:
103.133.140.0/22
IPv6:
2404:4d40::/32
Signature Algorithm: sha256WithRSAEncryption
9a:de:8a:f4:6c:d7:08:d2:40:1d:c8:14:a2:06:a4:33:04:b2:
93:50:db:f2:e0:ba:10:00:11:92:61:1a:76:97:b3:4f:c1:68:
84:08:2e:68:cb:fa:76:3e:76:09:0d:5f:ac:c2:b1:f2:79:60:
dc:bb:c8:b8:ab:3c:a5:8a:d9:da:90:d6:cd:a1:02:de:7c:28:
7a:92:ec:7f:b5:a3:20:04:0b:a8:73:32:2c:2e:1b:1d:eb:b3:
3a:81:e8:dd:33:89:32:90:4d:73:1f:49:54:b6:9c:8c:52:cc:
fe:93:a9:e3:af:dd:f4:93:fb:52:49:c6:2a:e5:ac:53:b9:8a:
77:77:0a:dd:2c:f2:81:57:da:cb:49:52:1b:3e:f6:b2:66:c9:
53:09:a6:82:9c:8b:70:cd:6c:9d:61:00:be:8e:00:95:a2:d8:
7b:25:49:49:01:51:4f:3b:c5:e1:9c:32:18:0d:00:76:e3:10:
c1:2a:ed:14:99:61:34:83:28:8b:55:67:7a:23:41:e2:e2:17:
e1:28:27:b8:0f:7d:0e:c3:65:43:8a:eb:91:8b:61:e6:84:31:
bd:05:b0:e5:15:b1:f7:8b:a2:04:73:e2:cb:67:39:a9:93:47:
fd:57:34:35:69:7a:26:4c:ef:41:cf:c2:c3:01:fb:64:c8:0a:
22:24:84:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:24:52 2025 by rpki-client