Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer
File: kBqfnorkBi5SGbdlLY6f7n7FrjM.cer (raw, json)
Hash identifier: UTcc6TCZu29/WoWuglgnYy7twB/uTparo4J38dZvP7w=
Subject key identifier: 90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021E6F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 28 Nov 2024 21:59:18 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 134717
IP: 103.197.192.0/22
IP: 220.158.244.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138863 (0x21e6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 28 21:59:18 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91F2CE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:ab:31:11:59:15:df:57:c2:29:01:ba:e6:
cd:0f:ef:7d:cc:14:a6:13:a2:aa:b1:87:5a:2d:e6:
d0:f0:57:97:61:d4:c6:9f:b3:d4:c6:66:97:40:4c:
26:c1:74:ae:0a:90:ea:33:2e:71:b1:79:f5:f7:41:
8d:02:d9:30:c9:39:9f:0c:3b:41:6a:f0:ae:ba:86:
16:ab:db:e9:c3:98:8c:05:a6:29:98:4c:3f:11:da:
b3:9d:0c:1f:1f:96:1f:ee:e4:23:5d:4b:71:ab:e7:
ea:e1:eb:bf:7f:d3:35:63:a0:9e:29:fa:b3:31:20:
0e:3e:15:9c:de:e0:6a:5a:f0:50:39:f4:71:5b:ef:
43:b5:e6:52:26:0c:b5:06:5b:f3:55:ff:5d:cb:a1:
59:26:0c:ff:3f:14:56:66:1e:a0:68:7d:3c:5a:62:
10:d9:b9:fa:d6:97:e6:af:de:41:cd:c2:a8:6e:19:
f9:30:8a:e0:0c:12:87:9a:15:db:20:76:46:be:54:
c2:e1:9d:ad:ba:50:45:01:5d:57:6e:fa:c7:49:62:
f1:2a:96:ad:64:de:33:5f:96:8e:2b:14:f7:d1:f9:
05:48:2b:f2:3d:fc:f5:2d:b9:44:7e:06:2a:4b:00:
51:3e:74:37:ac:f9:b7:5f:be:a2:02:2a:16:ef:98:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134717
sbgp-ipAddrBlock: critical
IPv4:
103.197.192.0/22
220.158.244.0/22
Signature Algorithm: sha256WithRSAEncryption
77:25:52:1f:2a:fa:8a:8e:13:44:1f:23:0e:78:42:aa:c7:e6:
59:65:08:8a:3a:db:ca:5c:a6:94:6f:13:df:b7:2e:32:30:41:
e4:6c:71:70:c3:f6:6d:87:3d:98:8d:c5:f5:b0:d3:bb:80:fc:
6c:34:49:65:58:e4:ac:1a:47:84:82:f5:c6:f1:36:e2:06:8b:
7f:40:36:09:11:40:2e:e7:f5:dd:00:c8:11:26:e0:b7:25:06:
0b:20:c9:92:46:7d:93:d7:73:9f:98:52:78:ab:5a:5d:6a:0e:
c3:f7:3c:50:06:10:4a:16:01:e0:63:87:d8:dd:f3:23:f4:5b:
1f:c4:14:dd:a1:38:1c:58:30:51:5c:88:ce:e0:90:d9:de:36:
98:99:15:db:82:71:0b:17:56:5f:3e:fe:c3:2b:49:33:3a:a4:
d5:01:f9:cd:91:bc:45:73:94:7f:f9:78:ac:f6:cd:50:ad:c4:
92:43:7b:f5:4f:3c:30:ff:85:ca:7f:6a:ff:99:6f:1a:53:ba:
86:7f:61:d3:b9:a0:e5:b7:b5:31:e2:4b:a0:00:27:3d:9d:67:
12:25:5a:42:41:63:33:ee:fb:71:32:cc:13:6f:d4:df:ac:e4:
7e:e5:ec:f0:5b:00:6d:4b:78:06:c1:d0:0d:9c:5e:97:68:3e:
fa:4e:f7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:07:55 2025 by rpki-client