Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer
File: kHuyYrVxYj40suIMYKcYwXOcw70.cer (raw, json)
Hash identifier: 01G7D6Bd6GhE/coIQUaX3el8dpRJ5yaU8SPMhEGW8YM=
Subject key identifier: 90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022A10
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 18 Jan 2025 15:12:48 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 135885
IP: 103.229.1.0/24
IP: 2001:df4:5800::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141840 (0x22a10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 18 15:12:48 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91A3A64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:b4:ed:e7:e4:b2:f4:13:55:08:18:87:3f:
f4:9c:95:24:74:5d:a6:99:6b:ee:0f:dd:51:4a:cb:
97:aa:30:17:0c:59:b3:e5:9a:be:70:f7:81:b2:da:
b6:08:37:60:ae:37:33:28:8a:d3:b4:82:e2:f8:f1:
b1:d8:43:7c:60:1e:6d:06:6d:0b:05:fc:b1:8b:d5:
1c:ad:01:c1:db:77:e9:f0:79:bf:1b:e0:1c:6a:c4:
c4:bd:a7:a0:a6:ac:08:f7:dd:53:26:8f:22:8a:29:
c4:e8:68:c6:fe:02:a8:7e:74:e5:c2:de:96:10:df:
12:b4:9e:8b:bf:08:95:30:d0:8d:bf:4f:d0:49:2c:
f3:f7:3e:ec:e9:f0:c0:cf:c4:fe:4a:85:df:34:65:
fb:55:90:21:7d:51:b3:c3:a4:39:d8:d0:f7:a8:d8:
ab:8c:8f:30:24:c0:fe:ff:2f:52:1b:a2:3e:3d:e3:
a5:b2:93:b1:61:00:ad:b1:78:0d:b1:fc:4a:bd:ce:
c4:01:4d:d5:fb:c6:f3:ad:60:35:c3:8c:56:24:b9:
f7:ad:d7:fb:20:41:b2:aa:f3:a1:4e:05:43:4b:70:
fa:de:b6:2c:d7:ea:15:25:4b:b5:62:e0:c7:73:5d:
97:aa:74:bb:f5:88:6d:5c:32:c8:bf:8d:d6:aa:e4:
ba:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135885
sbgp-ipAddrBlock: critical
IPv4:
103.229.1.0/24
IPv6:
2001:df4:5800::/48
Signature Algorithm: sha256WithRSAEncryption
53:be:9e:08:bd:a2:b2:b7:93:e2:99:47:63:c2:62:3e:35:0c:
ab:f8:c6:6d:9f:fe:34:34:ec:71:4f:22:ca:57:07:d8:15:6f:
c4:b6:71:cb:e5:e1:8a:d4:5f:c1:75:ea:3e:51:12:9b:80:1a:
5b:0f:d3:bc:d7:eb:c5:91:37:27:d6:dc:c8:34:bc:f0:ac:8a:
2d:37:ce:44:8a:d2:ca:87:e6:5b:e3:d6:3b:bb:e1:cd:38:4a:
c6:43:87:d7:df:a2:c1:f6:1b:f3:62:60:37:fe:9d:e0:51:6d:
e4:4a:d0:1a:e7:71:e2:de:f7:74:02:ac:fb:e7:fa:db:20:a3:
24:42:93:3a:40:d3:4c:9a:26:3c:d7:09:56:7a:b9:79:35:dd:
2c:88:67:8b:ed:66:36:7f:97:fb:c5:66:43:08:6e:72:d6:e3:
7a:a1:af:ab:24:19:f5:05:d8:c5:36:df:da:f4:26:4e:32:93:
79:7d:45:13:32:a6:48:ab:4c:b3:13:8d:91:de:ee:98:59:fe:
5f:e8:47:fd:c3:32:c8:3c:04:78:66:7e:2f:e5:63:d5:82:e0:
fe:c2:e8:f9:ac:6b:9d:f4:dc:67:53:c6:c0:ac:ab:d0:58:5a:
2f:cf:25:92:47:90:2d:cd:5c:ce:cf:72:61:35:32:f9:4e:37:
58:20:19:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:15:42 2025 by rpki-client