Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
File: iU_hE5i2ea6xsRixveZz4Yz26TQ.cer (raw, json)
Hash identifier: qzYFv7dKSDN1q1i7PBiqygpq+HIrTNu+QpsLUCq243M=
Subject key identifier: 89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022FBF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 07 Feb 2025 04:37:57 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 138398
AS: 139074
IP: 103.121.34.0/23
IP: 103.130.68.0/23
IP: 103.139.78.0/23
IP: 2403:b4c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143295 (0x22fbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 7 04:37:57 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A919C47E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:58:0e:be:d5:a5:1a:47:70:f1:11:24:fb:
49:ea:3b:0b:e6:29:d3:03:73:b4:b6:4c:d3:fe:01:
ad:02:8a:ee:75:41:7e:74:4e:53:02:65:6a:cc:9a:
d6:4d:87:8c:d5:38:99:14:d4:92:4b:76:7c:23:65:
cc:6d:68:c2:54:74:ff:8b:25:7b:17:8b:76:80:c2:
14:70:dd:74:50:96:b0:85:71:4e:dc:de:14:18:95:
c7:86:f3:a4:71:73:80:d1:12:c3:6e:b9:28:93:08:
4e:72:15:1f:04:12:7b:3b:7a:1b:6c:d8:8e:ef:bc:
d2:60:96:1b:a2:a5:05:fe:9d:10:a5:0f:13:e2:a1:
36:0c:d3:88:bd:4d:a5:a5:44:4b:d7:77:ac:a7:5e:
eb:84:52:e3:30:f5:2f:d0:0c:02:f6:a4:09:44:3c:
44:43:fb:0c:45:7d:a0:2e:62:ae:67:d8:03:e3:02:
f2:0d:91:2c:2a:7f:ed:ca:6c:da:97:eb:5e:fa:4d:
c3:c8:89:cf:58:4e:05:42:72:46:32:55:92:4b:ec:
76:3e:39:9e:a4:00:1f:f9:14:3e:a4:b1:1a:84:7d:
f2:d0:4a:63:96:26:98:6d:49:a6:39:68:fb:a5:23:
a3:aa:6d:9f:88:8d:32:74:12:65:23:34:aa:65:7a:
ff:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138398
139074
sbgp-ipAddrBlock: critical
IPv4:
103.121.34.0/23
103.130.68.0/23
103.139.78.0/23
IPv6:
2403:b4c0::/32
Signature Algorithm: sha256WithRSAEncryption
7a:de:90:d9:f2:4e:47:31:0d:6b:69:41:a1:69:d3:46:5c:35:
b0:4e:bb:e7:e2:45:5a:60:ae:65:d6:ad:3b:0d:c4:9c:83:fb:
02:6d:d3:c4:68:c9:43:54:fe:b5:ed:ca:90:44:28:18:bd:96:
79:09:35:ac:9d:25:95:fc:26:d5:6c:28:1e:29:17:58:ff:bd:
71:c4:eb:67:0a:06:e7:46:fa:c2:fa:aa:87:c3:ed:9c:7f:8a:
9d:71:c6:58:24:6d:9a:44:42:6a:34:07:1c:15:c2:da:66:ec:
81:9d:7b:c9:fc:ac:68:22:c4:b3:6a:83:8c:d2:10:73:01:01:
03:5d:6f:9e:1f:ba:0f:ae:4e:c5:e0:69:f9:49:92:1b:b4:01:
3d:8b:97:95:63:77:cc:95:55:f8:7d:04:0d:09:68:e9:3c:af:
7c:e9:80:a3:95:57:97:ae:04:c0:f4:a3:17:26:26:3f:94:4c:
5d:f0:83:63:8b:e4:2c:03:9a:3b:f2:29:38:00:4e:39:c0:42:
84:39:ec:7c:3b:3a:3f:df:e3:06:5f:49:c3:1f:49:c8:65:1a:
6a:ed:f0:80:6f:c8:58:9b:3e:a0:85:58:0b:b2:5a:4d:68:c0:
e2:11:2e:df:b4:c2:f0:ee:cf:fc:6a:27:5c:fe:2a:35:21:bd:
14:49:a5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:12:45 2025 by rpki-client