Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer
File: kFj-3Oxfh289_hYZQxnBRcnAzLU.cer (raw, json)
Hash identifier: hqWQ9dAdh5jrk+NaRgiEB1u+vsTV93VioNQc8v8UasM=
Subject key identifier: 90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0222A7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 14 Dec 2024 14:53:33 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 55941
IP: 202.94.78.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139943 (0x222a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 14 14:53:33 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A9185B0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:0c:e8:5b:23:27:81:d5:0f:b6:3c:71:63:
bd:21:7f:34:62:c3:da:88:8f:8f:34:54:16:92:5a:
a2:81:95:ac:ef:73:69:de:cf:e8:43:38:4e:ce:3e:
f5:01:6e:6f:28:27:ba:ff:e6:ea:93:b8:d3:48:b4:
f2:2b:59:92:49:5b:26:20:d1:cb:39:24:f3:06:88:
22:cb:c0:f3:98:52:78:4e:20:ce:45:e1:86:bd:0e:
87:87:94:54:65:98:ef:5b:20:54:9b:6e:6d:e0:18:
2f:89:bd:76:d4:32:26:de:31:74:f1:5e:06:61:3d:
e7:bb:ea:66:38:e2:f3:a6:45:e0:69:a8:9c:34:4e:
cd:20:7e:40:08:4f:1f:1b:96:6a:bd:a9:a4:f7:7e:
ee:16:f1:65:83:09:fd:0f:31:73:60:69:3b:0e:ad:
98:d4:44:75:7b:27:61:83:2e:12:47:49:0d:2b:c5:
e8:af:df:75:1e:93:99:14:78:cf:09:72:0a:0b:c7:
87:6c:9a:fa:6c:c4:46:ea:d8:2f:69:9c:15:54:74:
ed:d4:bd:75:d6:37:53:86:44:11:a5:3d:a8:92:48:
81:ae:bc:c5:48:86:70:c0:b9:d9:89:0d:5d:bd:57:
4b:6c:51:c9:3e:e2:5f:0b:59:07:1f:7f:e2:d0:ed:
cc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55941
sbgp-ipAddrBlock: critical
IPv4:
202.94.78.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:67:8d:89:39:65:e5:5c:e3:fb:5e:0c:64:50:dd:8e:a2:71:
83:ce:1b:88:4b:a2:db:26:71:a2:f3:e1:30:97:0d:e2:82:e9:
d4:bc:eb:69:34:12:84:80:72:78:58:0e:8c:1d:91:6b:4c:1f:
21:5e:a9:d4:d8:93:bc:6a:0a:65:ae:97:75:3f:c5:34:3b:21:
85:b6:2f:8c:da:f9:33:00:50:2e:bb:bb:b4:1e:45:e9:0b:7a:
0c:13:2e:f9:91:b4:b6:c5:24:a0:4a:31:f3:de:b8:0b:fc:13:
cd:48:7b:e0:36:e3:ac:41:0a:c7:dc:2a:5d:3f:f0:79:04:82:
d8:57:8a:55:ba:3e:ea:68:55:d4:52:96:bc:57:23:aa:0a:cd:
f6:07:b5:25:14:77:41:3a:54:c3:14:0e:a5:33:1c:5c:34:76:
1c:90:17:02:e1:60:3b:61:5e:3f:30:0a:b7:48:da:f5:42:f3:
3a:93:79:40:71:b2:54:d8:e6:8b:19:f9:a1:df:cb:12:4b:f4:
0b:f4:0a:f6:94:9a:10:ac:ec:95:ca:ee:82:a2:f0:ea:e8:d9:
c8:bd:4f:96:75:4a:f6:df:f0:ba:35:5f:65:6e:07:3f:b1:f7:
d0:33:b1:32:45:69:67:ba:c3:7e:6f:53:4e:33:b6:f1:b6:d5:
bd:75:4e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:31 2025 by rpki-client