Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
File: mOHsvUXXh5-byUOfTGwvJxStNvU.cer (raw, json)
Hash identifier: OANCgQFXc3IVuMV/zo36NgCKh8NfJmFSM5MCwHIOMA0=
Subject key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022164
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 08 Dec 2024 14:35:39 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 147291
IP: 103.174.96.0/23
IP: 2001:df7:c380::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139620 (0x22164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 8 14:35:39 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91623B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:db:7c:85:60:c4:6c:ff:d7:86:73:86:9e:
9b:31:dd:ac:5a:5e:08:54:d4:b4:28:86:5e:23:bf:
ad:01:37:8b:39:25:91:66:15:98:fa:fd:e8:87:b0:
5b:4d:05:82:8d:c1:2d:d4:c1:c1:c5:06:63:bb:c2:
ef:bd:a6:5b:ab:b6:8f:b1:84:e2:bd:e7:ea:64:1c:
99:1a:c6:82:63:c5:91:fd:c2:c0:de:a5:4e:87:07:
59:b1:59:4f:09:3d:45:cf:3d:1f:a8:ff:a2:8e:94:
f7:fa:58:7a:87:55:af:dc:e2:9e:d4:26:4c:43:06:
fe:df:ef:ac:d3:99:17:c8:b5:e2:7f:ae:06:ce:f6:
1d:38:c2:4b:e5:d6:d6:c9:9b:7b:3e:d7:3d:50:8b:
ae:f8:58:72:3e:ca:34:af:8d:a7:07:00:5c:8d:fc:
f3:33:79:58:04:67:e3:d1:b6:54:4a:c6:4e:f2:48:
01:6a:84:b9:5f:96:b5:56:f6:6b:23:1b:3b:2b:a9:
7b:83:98:7d:6d:86:c9:ac:3b:43:05:70:18:ff:ce:
86:d5:a6:0a:b0:76:cb:57:62:b5:ed:3b:59:f0:af:
ec:64:f6:03:27:9e:6e:4d:c6:e3:b7:66:03:eb:6e:
71:01:67:28:6e:16:cb:a7:b8:51:dc:86:db:5e:ad:
5e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147291
sbgp-ipAddrBlock: critical
IPv4:
103.174.96.0/23
IPv6:
2001:df7:c380::/48
Signature Algorithm: sha256WithRSAEncryption
6c:f1:76:60:3b:de:db:17:98:ed:33:6d:29:63:0c:cd:15:df:
f4:3d:e7:8f:8c:8e:d5:7c:0c:da:e0:9b:8d:f0:42:19:69:80:
25:35:61:80:b1:d0:4e:b7:2e:38:fd:f0:a3:17:b5:11:70:00:
cf:d6:9b:60:15:ab:09:e0:90:e9:34:c5:1b:b5:2f:a1:70:3f:
8e:21:d8:0e:d3:fb:2a:a0:c4:40:e6:78:d1:02:52:e7:f8:9c:
8c:1f:2a:41:81:18:1c:d4:7c:04:81:fa:47:4a:9b:7e:98:8d:
8b:de:dd:ae:a5:5b:78:bf:30:6f:05:02:19:ce:f2:8b:36:5c:
1f:7a:50:72:92:53:0d:9f:f7:25:80:6f:5a:45:8b:ca:8e:b4:
79:29:3b:4d:e8:4b:8e:0d:ae:ae:1d:1a:bc:b4:0b:41:06:9f:
e2:f4:7a:67:46:a5:66:9b:15:2a:39:3c:a2:03:d6:0d:60:9d:
b5:98:cd:ae:dd:6f:4b:88:00:d9:91:59:25:92:f8:b4:8b:f7:
f8:d7:ef:79:a9:7b:c5:97:24:da:11:08:61:6e:f1:96:04:95:
d8:c4:11:98:b0:24:1c:c8:f0:1c:26:dd:82:54:6b:85:86:52:
ae:fa:4f:ca:e2:b5:29:10:55:c0:86:2a:da:82:7a:a5:e8:da:
ba:c3:dd:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:11:34 2025 by rpki-client