Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
File: lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer (raw, json)
Hash identifier: FNnYO2sfL/ZCGrrMRA5F9sZnxfPSP25CFrxgD4lO/zI=
Subject key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0228FD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 13 Jan 2025 18:46:49 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 149026
IP: 103.176.218.0/23
IP: 2400:35e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141565 (0x228fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 13 18:46:49 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91B075B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:53:dc:a8:1e:05:77:06:e6:2d:6a:a3:58:
70:c5:2a:e8:f7:ff:62:6f:28:bc:8c:ad:2c:42:5d:
9c:1e:0f:1e:e6:37:50:02:63:a0:dc:96:42:d8:94:
27:47:8c:1f:4b:d5:a5:37:11:6b:1b:59:5b:98:47:
be:28:fa:8e:87:18:17:65:81:fd:ef:ac:cb:22:e8:
4a:c7:08:e1:1d:b2:5a:17:8a:8b:48:01:8e:16:e4:
03:0e:40:8a:9f:71:53:71:f1:31:34:ea:6e:bc:b2:
9f:04:1f:46:d9:4d:0e:07:c5:fe:3d:25:5a:b9:16:
cc:f6:45:8f:4a:b2:55:da:32:17:13:97:68:06:63:
5d:60:22:3c:47:7c:df:2f:b7:4d:70:69:5a:3f:b6:
48:c0:17:a5:46:83:8d:82:a3:fe:5d:85:1a:0a:ec:
04:47:b1:0e:d9:91:09:60:35:47:b5:ea:c4:d1:3a:
a5:ea:94:00:13:8c:d9:94:06:f6:df:13:45:17:e2:
45:d4:d6:e2:bf:69:e1:0c:6a:c4:98:99:d1:9d:af:
fe:d5:c9:0c:6e:8b:d3:4d:e1:aa:b5:5b:06:4b:e9:
24:a3:d8:48:0d:b2:3d:52:d9:1a:88:d5:b4:02:24:
63:ab:6d:1e:e8:e6:37:73:59:e8:85:37:c7:95:3d:
a2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149026
sbgp-ipAddrBlock: critical
IPv4:
103.176.218.0/23
IPv6:
2400:35e0::/32
Signature Algorithm: sha256WithRSAEncryption
2a:c0:ff:93:51:59:c9:ef:6e:b8:e0:d2:ff:e2:01:1f:f6:4b:
16:46:0b:a5:33:61:be:65:1d:dd:89:8c:f7:5b:f8:5c:92:70:
66:df:02:a5:3d:c4:4e:a3:4a:7f:db:b3:4d:f2:d0:71:00:7b:
80:9b:ce:c6:d3:55:ec:1f:45:22:9c:6f:16:50:05:2c:a5:2f:
aa:43:90:ca:60:bf:c8:2d:64:b0:e7:56:aa:7a:de:9d:ca:10:
10:0e:75:c5:56:b6:a5:76:ca:49:e2:03:46:55:f8:a4:78:a0:
51:f5:ab:da:b9:51:22:48:27:dc:93:3a:e0:08:db:8e:70:c9:
b5:9e:b0:d9:3f:25:61:09:5c:8e:ef:e6:43:ef:09:ea:63:cb:
52:37:80:11:9e:42:e5:71:80:3e:f9:5d:a7:1b:44:fb:41:be:
64:51:6d:5e:39:97:1e:5b:3b:31:11:89:b2:2a:22:24:7f:da:
14:56:a2:2a:69:37:72:d1:07:bc:19:94:b4:9d:b2:f6:b7:4d:
70:48:ce:13:73:d0:e2:8b:c3:c5:89:74:8b:7c:1e:b1:6f:7d:
62:40:4e:8b:2a:d1:81:70:4a:fb:ba:89:67:12:2b:6a:c2:5f:
0c:8a:6e:0e:84:f3:cd:8c:fe:6f:8e:99:0f:d8:32:01:29:90:
0a:6b:72:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:15:05 2025 by rpki-client