Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
File: qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer (raw, json)
Hash identifier: jumAHlLjYnkG1z7oKqqXtoldFYwP3BAmvDP3nO0MxPE=
Subject key identifier: AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02211E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 06 Dec 2024 16:21:52 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 9258
AS: 9650
AS: 45837
AS: 153308 -- 153309
IP: 45.64.68.0/22
IP: 103.233.236.0/22
IP: 203.5.10.0/24
IP: 203.9.184.0/22
IP: 203.15.124.0/22
IP: 203.18.108.0/23
IP: 203.21.12.0/24
IP: 203.62.216.0/22
IP: 2406:3c00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139550 (0x2211e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 6 16:21:52 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A917E4BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b5:d8:68:68:c8:41:4f:60:d0:d1:91:fa:52:
d1:e0:79:ac:88:07:d5:a7:d8:b7:bd:08:eb:3b:51:
a0:ca:51:c7:45:13:5d:bd:12:7c:07:ba:96:0d:c1:
1e:a4:88:fc:7f:0c:ab:89:4e:cd:0c:0e:49:de:5d:
c5:6d:2a:8f:c3:fc:29:1f:1a:8a:37:69:fd:f7:0d:
20:0e:71:e9:ab:fd:44:6d:64:3b:fc:93:64:f7:9f:
38:02:31:37:31:55:c0:0f:2a:d5:fa:71:4e:72:dd:
a8:90:79:51:cc:b3:ee:48:36:6a:91:da:f0:5d:ce:
d7:0f:b6:2a:9f:a8:dd:c6:fd:e6:96:bb:5a:7e:5c:
5a:ff:51:ae:57:00:e6:40:6f:30:96:e8:1d:ff:84:
75:0d:20:7c:d2:1b:d1:54:75:32:46:87:cf:a4:28:
cd:e8:69:76:da:08:f7:60:d9:b9:54:21:af:92:6c:
ac:b4:00:87:61:2e:da:51:4c:72:e8:84:70:e6:3c:
11:ed:3d:a6:ae:25:0e:f9:3b:39:e9:32:1d:9a:8e:
e3:f1:44:ac:55:1f:c9:ee:d6:73:ae:00:b9:a2:ab:
6e:a3:f5:a4:41:c6:c4:8e:ba:81:ae:ca:60:f1:bb:
37:4f:6e:d7:68:57:4b:42:e4:c6:d4:7b:e6:53:cc:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9258
9650
45837
153308-153309
sbgp-ipAddrBlock: critical
IPv4:
45.64.68.0/22
103.233.236.0/22
203.5.10.0/24
203.9.184.0/22
203.15.124.0/22
203.18.108.0/23
203.21.12.0/24
203.62.216.0/22
IPv6:
2406:3c00::/32
Signature Algorithm: sha256WithRSAEncryption
86:90:6c:05:b6:d8:78:14:33:bd:20:50:06:3c:b8:f0:70:ef:
d4:4d:5b:14:36:f8:52:2e:25:e0:fa:a0:5c:94:a6:c2:e5:4b:
3d:e5:0e:b2:01:1e:00:76:af:6e:46:2f:af:f6:87:21:23:72:
3a:45:80:dd:54:db:47:1a:df:0b:67:d2:63:cc:b5:21:ac:b9:
c5:d9:51:20:c0:e5:66:b3:61:03:0d:b0:37:7f:1b:b3:a5:00:
e2:0c:db:4c:96:e5:9c:d4:21:93:17:b5:47:50:5b:03:2a:aa:
6d:e7:dc:40:80:83:49:cc:a9:00:c3:9e:b7:68:61:94:2f:fa:
42:4b:49:50:12:53:66:41:5f:21:68:82:01:8b:51:ac:0a:34:
fa:87:c2:ca:7b:de:de:62:35:06:e2:da:3d:89:3a:82:0e:9d:
ec:0c:75:4f:4a:72:33:6d:52:78:a5:ef:0a:66:5b:6b:a3:35:
9c:5f:3e:a6:02:37:c3:71:54:7b:ef:35:df:23:5c:20:65:75:
d0:ff:56:08:8d:65:74:2b:7b:ba:e9:c0:6b:69:a1:64:30:a5:
66:cd:6d:a5:7c:78:24:d4:89:41:83:e3:7c:d7:59:29:2e:86:
7a:30:c7:d9:0c:6f:48:eb:29:84:2a:9e:e6:45:9f:80:0b:72:
9c:64:bb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:04:31 2025 by rpki-client