Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer
File: nczQgPBy3iTvhCxqopJJnvE2m_Q.cer (raw, json)
Hash identifier: HDYNv7x1ua9Sj6tCekBTyDVjmbeSwof7pqJYj1jz98A=
Subject key identifier: 9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02299A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 16 Jan 2025 01:42:55 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 132257
IP: 103.8.236.0/23
IP: 103.243.150.0/23
IP: 2001:df0:2b1::/48
IP: 2404:2940::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141722 (0x2299a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 16 01:42:55 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A916A504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:4e:2f:b3:c4:4f:9d:d8:13:61:cf:ab:7a:
69:64:90:dc:24:a6:74:2a:5b:c7:12:89:dc:3e:49:
aa:77:b2:15:5f:96:2a:14:fe:b3:1d:4d:2f:dd:c1:
40:ae:40:df:d7:08:cc:a5:e6:44:4f:89:e7:1a:63:
5e:ba:ac:0c:6f:51:ce:5a:45:6a:a5:ef:77:cd:3f:
8f:a8:4e:a5:66:5b:57:f2:65:0e:2b:91:eb:c1:f0:
0a:08:08:d2:14:e8:c4:f7:d1:25:9a:1c:cc:ab:f5:
09:4a:48:55:84:a6:22:17:8a:ad:29:16:99:8b:09:
ba:9b:b0:c8:0d:66:6b:df:7e:d8:29:cd:6c:04:71:
90:f6:34:04:9b:d9:e7:48:d0:bd:d7:05:5a:ff:62:
0d:f0:08:88:51:b8:7b:f0:de:e2:b7:0c:10:89:f7:
63:a6:dc:34:d2:1b:68:56:4d:6c:88:7d:01:6a:9c:
76:5d:d4:be:e3:4f:ac:cc:ca:5b:bb:58:f6:21:d7:
f7:25:9a:50:f0:1c:cd:39:0d:75:c2:25:c9:13:ca:
5d:15:d6:64:43:2d:6c:5f:7b:84:05:fb:1d:3f:b8:
3a:9b:70:cc:48:dc:48:55:5e:9a:77:e4:31:89:27:
1e:86:e3:38:0e:b6:d7:d6:6c:d8:65:0d:e3:4d:25:
a0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132257
sbgp-ipAddrBlock: critical
IPv4:
103.8.236.0/23
103.243.150.0/23
IPv6:
2001:df0:2b1::/48
2404:2940::/32
Signature Algorithm: sha256WithRSAEncryption
54:6f:52:4d:8f:1f:ff:11:9d:2c:95:bf:50:f9:2a:d3:df:64:
82:38:83:2e:fb:33:39:eb:57:5f:c6:01:ab:fa:97:3a:68:be:
ca:3e:de:b7:24:40:50:e8:24:c8:85:34:a2:97:b8:79:a1:80:
75:cc:d6:06:5d:00:05:5f:5b:a4:e3:b7:ad:06:80:b1:67:f0:
d3:b4:da:c9:d8:36:fe:b0:d5:fa:18:c7:13:4f:8e:3f:d2:f0:
25:ed:63:33:c3:00:67:01:52:f2:66:8b:d0:10:da:e2:20:9c:
da:bd:cc:6f:8b:e8:fe:dd:1f:93:31:bf:70:27:c4:36:66:98:
ee:7d:38:33:73:26:15:9d:a6:8a:81:0f:e4:59:14:17:e1:cd:
f7:20:de:86:6e:4e:cd:89:dc:64:8a:37:1b:09:30:a8:4f:83:
29:30:c1:6a:fa:7b:ba:21:2b:d9:d2:4a:0c:7d:37:03:4d:c6:
38:82:f4:4d:e1:10:21:ef:3b:3d:a1:0f:bf:ed:67:ba:d6:fe:
a1:99:60:a4:c6:06:81:42:2d:cd:b7:c7:16:9d:78:f3:6a:b8:
b8:3e:5f:e1:4f:cd:6c:53:c8:09:8c:7f:cf:f2:cd:1a:ec:4c:
5b:d2:97:02:bc:be:05:f6:2e:c7:f1:53:3e:15:8f:61:b8:6f:
6b:43:d3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:13:29 2025 by rpki-client