Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
File: k9FqxcizBHYOd0g_k-6vq8OjCxI.cer (raw, json)
Hash identifier: M9gutMb8gAXHEZ4+WjxUVV46TMvRYBNzMRpmQktN9Es=
Subject key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02319D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 17 Feb 2025 12:39:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56192
IP: 103.255.128.0/22
IP: 202.0.110.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143773 (0x2319d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 17 12:39:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A911E64C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:46:a4:ea:b3:28:15:94:c7:57:f6:04:39:40:
4e:83:9c:8c:6a:ca:5a:8e:1a:cf:40:99:af:4b:e7:
03:e6:8a:c4:57:ff:c7:fd:86:b4:76:32:55:ed:9a:
8a:bd:b8:af:c0:f3:02:50:3c:da:31:6d:12:82:fc:
3c:15:93:f8:5e:4b:ea:6a:03:f0:fc:0b:8c:f4:12:
c2:31:aa:34:78:88:47:68:23:a0:7e:71:3a:db:34:
b6:f2:0f:dd:9f:69:75:1e:e7:3e:d0:4d:66:c1:fe:
31:a5:23:48:49:6a:6c:91:bc:12:08:18:03:2d:6c:
de:0e:04:4c:b2:70:dc:e3:31:19:34:ab:2c:86:32:
84:90:e9:0b:01:c2:b0:7e:c8:ec:7d:e8:31:bd:a8:
0c:b2:02:86:47:6a:0e:43:76:8e:36:c6:9f:33:c2:
cb:d1:78:42:bf:2b:65:d2:63:e4:37:a1:0d:4b:ac:
ae:ad:7e:d0:8e:cc:93:a6:1b:47:37:05:15:48:2a:
65:c5:28:07:0e:db:10:fa:b6:a4:28:39:c5:e5:eb:
ba:1c:9e:45:3c:d8:c7:2a:42:60:36:8e:46:f6:a6:
18:65:25:e3:3a:99:2b:e2:1d:5f:2a:32:c1:5c:13:
50:3b:cc:e2:06:91:9f:89:cd:99:74:7f:01:61:71:
3a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56192
sbgp-ipAddrBlock: critical
IPv4:
103.255.128.0/22
202.0.110.0/24
Signature Algorithm: sha256WithRSAEncryption
61:7f:b2:de:3f:4f:ee:b7:39:36:c3:38:b9:d4:cd:08:0c:63:
b4:ba:1d:fb:0b:b6:50:81:f2:42:4e:7b:5e:3a:bc:c4:e3:c2:
e3:77:06:4a:a8:c4:30:6b:c0:ca:d6:4a:3f:76:e4:27:86:77:
c7:e6:27:53:ec:b3:a4:be:1b:f6:f6:bd:25:c7:82:82:24:22:
c2:d4:6b:bc:e4:c1:65:4b:0d:70:3e:6b:c8:8b:43:15:80:52:
25:f1:d4:e6:ee:21:7b:67:b2:e3:c5:ec:c6:26:39:f1:2d:67:
c0:85:6d:05:46:3f:b3:e5:7f:ab:0e:2e:b7:c1:66:0b:bc:21:
bd:e9:7e:51:b3:bf:cd:8c:38:00:de:5b:cf:59:df:9d:ae:c3:
d5:ed:77:1d:47:8a:23:12:89:f8:21:f7:26:57:5a:09:16:93:
2e:2e:f7:aa:d6:10:b0:c2:80:c1:1b:ba:c0:bd:12:2c:c8:43:
7b:75:5c:52:87:5f:f3:6a:44:7e:26:c9:01:55:72:6d:13:29:
2e:6a:46:af:25:ae:29:ce:d5:2d:a0:31:7b:9f:7e:42:25:e3:
1b:9b:78:7b:1c:c2:24:2c:42:c2:bf:fe:6c:2e:09:bb:2b:77:
8e:3a:6f:c5:3f:b5:13:d1:48:65:32:9f:7f:48:59:9e:e0:d4:
dc:74:4a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:06:28 2025 by rpki-client