Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
File: kNimlscsPFwGLY8AJhBf_c0Bz40.cer (raw, json)
Hash identifier: vOXyfE/R+4U8BBQDSPLl5VO6OxVcZg8+rgqHVz+PqGo=
Subject key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022D52
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 01 Feb 2025 00:13:27 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 149283
IP: 103.177.240.0/23
IP: 2001:df0:2d40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142674 (0x22d52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 1 00:13:27 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A9192C28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:c9:4c:60:58:76:c0:f1:ae:3e:29:20:cc:
c6:26:a0:03:42:7f:48:e9:04:f1:05:61:9f:a2:82:
36:94:4a:7f:37:2e:ee:01:bd:31:73:dd:e3:77:8e:
2b:67:45:a5:31:2f:de:9f:d4:86:fa:c8:9a:8c:13:
77:8c:f8:ea:85:d4:ab:0f:4b:38:c0:45:36:c0:e4:
e9:db:8b:ef:7d:a1:e5:d5:4d:0f:b5:8e:f4:5a:57:
06:e0:df:02:37:27:f7:de:40:99:5e:03:42:28:bf:
d4:81:ba:9a:19:d5:32:a7:aa:99:84:19:02:01:7c:
01:fe:41:30:18:6b:0f:86:d7:cf:99:64:30:65:e0:
fb:6f:89:fc:68:16:b2:63:84:17:13:bd:f8:24:18:
a3:3b:c9:a6:e8:a2:53:78:e9:1f:cc:be:ad:92:a6:
25:ab:cb:bc:87:6f:d4:03:68:fb:f4:7c:f2:0f:43:
3a:a2:03:4f:f8:fa:10:c7:b7:dc:be:0e:d5:25:b3:
14:ad:b3:11:e9:44:6c:b3:3a:bc:6f:65:4c:f4:2f:
d6:27:f9:9e:7a:2d:39:9c:c4:c7:c5:67:c4:b7:05:
b4:9b:15:60:e4:97:02:14:42:00:17:30:da:b5:b0:
d9:f5:0b:cf:7c:c2:34:5a:c7:a2:1a:99:f5:fb:c9:
f4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149283
sbgp-ipAddrBlock: critical
IPv4:
103.177.240.0/23
IPv6:
2001:df0:2d40::/48
Signature Algorithm: sha256WithRSAEncryption
c3:92:08:7e:5d:d4:4a:cc:b6:d0:24:e0:3a:d0:70:9d:72:55:
8e:18:44:67:ec:65:d6:57:05:90:86:3b:4c:44:37:62:b9:a6:
a7:b7:eb:5a:85:44:8b:4f:7c:ef:62:54:1c:77:cc:77:bd:0b:
aa:79:36:ac:36:7c:8b:0f:5c:d5:65:a6:01:78:5d:7a:ad:f1:
0f:d9:20:01:8d:b8:e4:f2:fd:ab:32:f7:4e:60:84:76:8f:84:
e4:b3:b8:14:c5:d3:8e:73:54:13:6a:fb:3c:77:c2:36:2e:93:
a9:d0:f2:1c:56:37:24:4f:c9:f7:a5:ba:e3:e3:d5:bd:59:24:
af:d0:34:a3:9a:15:29:9c:0f:45:84:b4:a0:79:54:60:49:1e:
ca:ce:c5:26:71:ee:d7:57:12:10:31:c4:39:03:f8:9a:bf:31:
b5:d8:25:11:c5:95:35:a2:e8:9d:23:30:8d:72:9f:78:b9:7d:
27:c8:1f:35:be:95:09:d2:37:42:76:40:f1:93:69:b1:9c:de:
8e:5f:f1:14:2a:52:1f:a6:5c:a8:df:f6:20:3d:64:26:a2:c8:
eb:a6:77:a5:25:9d:3b:da:c7:55:9d:25:1c:22:36:71:a4:3e:
a5:13:4f:17:b5:28:f1:31:b3:80:bb:ba:ff:1a:10:cf:af:10:
4b:c0:c7:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:56:46 2025 by rpki-client