Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer
File: m8Zs_4CainEhIAXdnCcEerQYyKc.cer (raw, json)
Hash identifier: ZydL+WZutWFsL6t4LIWGXGg/ivHjdMXQuj9X7WZPDK0=
Subject key identifier: 9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021DFA
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 27 Nov 2024 16:30:28 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 24479
IP: 203.3.167.0/24
IP: 203.28.212.0/24
IP: 203.30.192.0/24
IP: 203.170.0.0/20
IP: 2402:4d40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Apr 2025 00:59:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138746 (0x21dfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 27 16:30:28 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A9173780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:71:b0:8b:ef:61:51:1d:74:48:63:05:07:64:
e5:ed:a1:84:3f:fa:4c:8a:3d:12:0c:39:19:95:d3:
8b:5d:4b:15:f4:67:11:31:63:32:99:c1:7a:c3:0a:
93:25:fb:17:79:2d:67:a3:ac:95:0c:66:6a:7e:c7:
34:f9:4b:3d:4e:cb:df:89:67:33:03:eb:50:db:1b:
0e:5e:ba:5e:b1:eb:0b:e7:11:c4:82:92:4f:56:9f:
85:cc:18:61:c3:8a:9b:b4:08:86:e5:a8:8e:35:45:
58:2e:86:f6:ef:0e:e0:94:25:b4:63:6c:de:bc:58:
88:3b:44:55:f1:bc:dd:b3:19:e0:c9:57:c6:19:1c:
69:f6:de:c6:11:97:39:1b:18:3a:e6:87:f2:cc:2b:
e1:21:67:13:9c:36:c7:c0:cd:08:52:e7:bd:2c:77:
62:ea:e4:1f:41:9f:77:36:c7:0c:ff:3f:a6:15:3f:
70:41:98:2e:95:da:aa:a6:e8:b3:b0:cb:01:2b:0b:
f1:f3:40:48:67:31:7b:3a:d3:60:6b:fe:98:89:7a:
86:f5:c6:a0:77:12:c2:03:75:09:82:3d:63:92:87:
04:6f:ae:5a:13:a1:0c:4c:35:9d:15:fa:65:50:a7:
6d:c4:a6:de:c3:24:d5:48:2a:17:ca:4e:2c:74:3f:
9b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24479
sbgp-ipAddrBlock: critical
IPv4:
203.3.167.0/24
203.28.212.0/24
203.30.192.0/24
203.170.0.0/20
IPv6:
2402:4d40::/32
Signature Algorithm: sha256WithRSAEncryption
a4:de:84:3a:c8:21:33:21:e4:1d:43:c1:89:27:c8:48:f1:39:
cb:92:d9:e3:42:c1:ba:48:3a:b3:09:df:e5:7e:8c:4e:3f:87:
5d:7c:df:a0:71:c5:1c:5a:a6:d1:b6:bb:02:1b:23:36:07:27:
a3:64:79:3c:31:f0:9b:1b:df:bb:f2:85:98:52:76:30:4c:ac:
2d:eb:32:43:c7:55:f1:21:16:dd:69:9c:75:07:e8:40:fb:b6:
ad:88:9b:59:4d:2a:77:ab:38:29:b6:5e:33:d2:74:8c:8a:1c:
69:aa:88:5b:f0:5f:d8:48:a9:82:af:ef:2e:7f:98:1c:23:4b:
6f:49:bd:d6:1f:86:4a:54:61:66:10:b8:b2:23:4b:b1:d7:5f:
df:64:26:f9:b2:b1:7a:70:fa:eb:b7:e4:3b:1a:0d:be:90:c0:
67:7f:43:14:13:0d:cf:47:27:9c:fb:ac:11:8c:97:ed:9f:70:
b9:80:a0:d6:2d:10:f9:e9:d4:80:3e:b1:98:a6:c1:94:6c:2b:
9a:fa:90:e3:e2:b0:56:1d:6f:26:57:f5:db:4c:1a:aa:6a:18:
07:76:87:3e:f3:9c:87:0b:3f:85:93:d0:f7:dd:84:7c:85:c1:
d6:0f:ad:85:2e:93:41:20:a9:21:45:92:f4:35:d1:27:9b:a7:
ef:a3:10:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:57:20 2025 by rpki-client