Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer
File: sQtPQ0P6rissTT3WYGS-km7HTJ8.cer (raw, json)
Hash identifier: 6J3Cwu7hLrQRTuzh7f9I4HOoAHO57uecE2oTca2HFt0=
Subject key identifier: B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022494
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 24 Dec 2024 15:26:47 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 9483
AS: 150454
IP: 202.50.109.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140436 (0x22494)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 24 15:26:47 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A915CE2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:aa:47:c1:2e:20:66:0f:7d:9e:83:ff:0b:43:
84:43:ed:6d:83:5f:33:08:0a:b0:3a:8e:67:d4:68:
21:3f:63:be:d0:8c:17:6e:d8:d8:36:07:aa:f9:a9:
62:73:f2:94:ff:5c:99:7b:07:a1:ce:a9:64:0f:74:
62:20:42:c3:76:d2:06:eb:c8:56:99:0e:2c:b6:36:
21:32:2c:e0:f2:fb:2b:f2:39:64:f8:62:a5:fe:8a:
d5:72:33:4f:a6:1d:de:25:a7:09:5a:b9:0a:19:95:
94:5c:f1:01:04:da:00:4d:b9:16:9b:68:a4:46:07:
bb:13:7e:b4:2e:18:57:be:d0:a5:37:d2:9f:94:1d:
98:07:95:82:85:be:11:3a:46:f6:b2:b2:dd:07:18:
90:79:41:2c:fe:88:96:a7:36:e6:90:bf:79:a5:76:
45:69:4d:f1:16:a2:f9:6b:07:e4:14:02:5d:64:c1:
91:09:c3:04:ab:f5:d4:c0:37:49:a4:2f:48:4c:16:
6f:ea:fe:9b:4e:32:f4:ed:03:b9:78:d0:80:38:99:
b2:c6:22:e4:4b:10:d7:bd:7f:24:dd:c4:70:cd:36:
35:ca:e0:74:2c:f5:d3:bf:24:c7:13:2c:b1:07:ab:
9d:e5:93:b9:22:3b:51:da:e3:9c:99:f1:ce:fa:61:
7e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9483
150454
sbgp-ipAddrBlock: critical
IPv4:
202.50.109.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:4e:2d:81:28:cc:86:ca:bd:b0:44:23:d7:3f:42:ba:81:6a:
4a:c9:cf:35:7f:33:a3:2c:bc:39:60:9f:69:bb:b0:6a:d8:50:
02:c3:1b:c5:24:30:b1:34:32:88:41:39:9f:49:db:97:b3:1f:
74:70:77:38:76:f5:50:e0:59:86:91:f4:f6:89:6b:50:1f:9f:
74:99:e6:5d:b2:7b:3f:7b:f1:ef:e8:88:0e:bb:6b:5e:50:2c:
e0:98:b6:ad:ee:bc:8a:2a:51:89:39:42:71:42:9b:08:42:18:
fc:10:ba:64:5a:ec:8e:1e:f5:4b:38:98:2a:80:a3:47:d0:fb:
14:38:95:20:5f:07:92:17:f7:e2:e0:68:16:92:7e:5b:9a:43:
c2:ee:f5:7c:01:80:94:fb:ed:c7:0c:28:29:2f:1a:fe:d0:66:
4a:25:ed:46:e8:85:eb:05:eb:d1:e7:cc:ee:ad:3f:1b:1f:a0:
80:58:db:76:5f:fb:d5:2d:d3:21:54:33:67:30:90:8a:4b:8f:
a1:e8:f6:63:c8:df:9b:53:06:81:74:f8:30:82:03:5d:a3:51:
75:0a:d3:96:94:71:d6:88:24:26:23:e2:79:2d:5c:80:93:17:
cc:e2:f9:39:32:57:9b:03:7c:02:13:51:c0:db:7e:96:a6:34:
68:89:0b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:10:12 2025 by rpki-client