Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer
File: mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer (raw, json)
Hash identifier: 4+OFo9ZAhzuY+VgV7fSIZ07y2hEvZfZB6WLoIXxxLBs=
Subject key identifier: 99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0226B8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:19:00 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 55863
IP: 49.128.104.0/22
IP: 2405:8d00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Apr 2025 00:59:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140984 (0x226b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 2 15:19:00 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A915F598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:17:8c:69:79:b0:21:36:00:01:e6:ca:f2:83:
62:38:f6:05:a5:ee:bc:c3:b6:4a:50:cd:a1:2f:99:
a5:88:a8:89:ce:bd:de:f8:97:51:47:ce:e1:8c:1d:
7d:3d:48:db:7b:0b:b2:ab:ab:1b:8a:30:34:e5:4d:
e2:85:27:f2:e4:7c:a5:74:06:76:0a:49:b1:07:ff:
31:d2:89:bb:c6:6b:37:70:b5:da:72:b3:28:fd:bc:
0b:59:0d:76:a0:c0:80:53:1b:47:01:2b:71:77:39:
51:a3:71:58:f5:7d:82:da:89:67:70:d2:65:a4:16:
47:46:3c:30:0f:7e:4d:9e:4d:25:87:d8:d5:ce:74:
7c:59:89:40:2c:5c:f4:61:1d:ab:8d:13:1b:74:c9:
01:e3:64:9b:27:4c:9b:ef:a7:68:88:f0:a7:c4:82:
ea:87:d1:ef:09:a5:49:3a:cf:49:2d:14:af:58:89:
c2:df:ff:cf:a3:08:22:a4:ce:a6:f7:91:6b:c5:d2:
d1:bf:47:55:ce:85:b9:d7:27:b5:65:43:3f:0e:6a:
61:f6:5e:24:47:b0:24:fd:7d:85:c3:ad:b9:fc:2f:
c3:9c:7e:03:82:23:8a:01:1d:39:3f:75:51:8c:7d:
67:d1:c2:e5:c2:65:19:ab:17:a2:5f:5a:eb:ff:1d:
7f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55863
sbgp-ipAddrBlock: critical
IPv4:
49.128.104.0/22
IPv6:
2405:8d00::/32
Signature Algorithm: sha256WithRSAEncryption
4b:9f:ed:2e:90:13:34:dd:23:09:74:b8:28:4a:6c:86:4c:41:
8e:04:0b:49:29:51:dc:7b:d9:e0:d7:e2:39:7e:18:bf:93:b2:
11:38:85:86:1c:2c:ac:11:0d:65:57:b7:b4:bb:62:32:21:4d:
37:6b:4d:52:37:87:5d:0a:c8:f7:ab:1b:bc:07:c8:37:2a:cf:
da:21:38:27:ec:43:ca:a5:ac:27:fb:85:03:38:8b:0d:ca:4a:
cf:9a:81:bd:7e:89:be:30:fd:23:91:de:46:dd:61:9e:8d:c9:
83:0a:b9:68:a8:20:14:08:04:f9:c1:cb:58:82:b9:00:1d:f1:
54:58:0f:92:48:05:07:08:19:20:4c:4e:0a:18:f0:d1:f4:08:
ed:6f:89:69:4f:db:30:97:33:6a:29:04:21:d4:b0:21:ee:54:
d7:3a:be:ff:b9:31:92:4a:12:df:db:45:6c:b9:10:7f:af:39:
39:8f:5e:36:b5:cb:b6:3a:a6:dc:46:01:92:42:e5:8f:39:1d:
28:5d:85:bd:3c:a7:9f:3f:78:46:ca:f0:2a:d2:ce:00:31:29:
ab:5b:7e:47:a8:b8:d7:d3:8f:40:32:58:b7:92:98:ad:32:53:
5f:32:2d:48:fe:c3:07:16:2d:5d:24:ae:13:4f:d9:7c:fa:82:
80:d4:79:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:11 2025 by rpki-client