Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer
File: svBcLOw1UNLTyetRODn0egAqhy4.cer (raw, json)
Hash identifier: eqmyXPMpmEj3TLYJYdjkxsCYlRe+DMCZBgUvd+EGEtU=
Subject key identifier: B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0235A0
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Mar 2025 16:11:44 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 149417
IP: 103.162.2.0/23
IP: 2407:b40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144800 (0x235a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 5 16:11:44 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A9172D88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:c1:41:2f:3a:6f:4d:c2:cf:6a:dc:20:6c:
6a:e1:cc:46:de:3d:96:8e:ab:cc:f2:90:81:9b:33:
af:86:ac:c6:fa:60:95:3b:49:39:f1:99:ce:e8:fe:
d0:21:ed:c3:e9:f7:29:26:b3:5d:b4:50:d2:1f:c5:
3d:b5:5b:22:89:f9:0b:c0:cd:38:b5:45:e3:ab:0f:
ac:77:69:5d:bc:8e:84:2b:8b:a9:3f:fd:0a:94:ed:
37:39:9e:d4:ba:fd:d8:13:9b:3b:26:24:88:fa:d4:
18:d8:5b:e5:c2:29:82:fa:46:d2:0e:3a:4c:63:34:
35:16:db:97:6b:fc:7a:da:7c:3d:ac:6f:3d:59:f0:
04:a0:48:15:0a:53:0d:63:3b:e7:17:7f:1a:9c:e5:
5b:d3:21:3e:0b:0b:7c:cb:3d:61:3e:a3:76:eb:67:
61:30:ce:23:ef:4c:16:6c:d7:94:47:a3:f8:94:e7:
37:5e:ef:77:03:b8:ae:4f:21:68:9b:62:47:ae:a6:
23:56:45:83:6f:9b:4a:17:89:2f:8e:50:6d:81:9e:
f4:92:2b:45:7f:f8:d4:7c:3d:77:b8:3e:7b:84:47:
22:da:85:45:62:bc:a6:a5:6f:ed:27:0c:4c:1b:78:
09:6e:1f:97:25:4d:f3:16:6c:18:60:bc:13:38:a4:
ad:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149417
sbgp-ipAddrBlock: critical
IPv4:
103.162.2.0/23
IPv6:
2407:b40::/32
Signature Algorithm: sha256WithRSAEncryption
c5:3c:ed:a3:23:a5:f9:25:45:f0:d8:68:d1:ec:51:b3:19:5b:
9a:9a:ab:13:20:fc:ef:0b:e1:1a:de:38:8a:6f:43:10:e4:8d:
7b:e0:30:72:0a:2c:37:4c:27:96:32:53:0f:66:ab:c4:78:40:
f5:f3:8a:e2:e9:57:4d:4d:42:2f:3e:7a:97:be:50:83:b9:85:
43:38:0c:12:69:43:46:84:8b:94:4b:a9:26:b5:98:9a:fe:b5:
3a:7d:40:c9:fe:41:64:7e:5a:3e:3b:0e:f7:e9:91:50:3f:82:
3f:fa:9d:dd:87:fb:f1:46:9e:80:fe:15:b5:e0:23:cc:52:0f:
f9:16:fa:85:8d:57:ca:bd:f0:27:c1:3e:94:87:0f:80:99:c1:
d8:27:97:e9:89:01:6d:88:d9:a0:87:30:a8:d5:47:c5:59:ca:
cc:1c:97:c3:f5:8d:f8:80:ca:a7:6a:24:02:c3:59:fd:bd:75:
9e:19:b0:4d:7c:24:ca:aa:8a:70:3a:16:ee:44:74:fb:90:68:
6e:29:10:cd:63:fd:90:2d:be:60:75:34:19:0e:2a:8c:84:b7:
63:68:e5:60:b1:2d:0a:f4:a5:5e:9d:47:74:3f:eb:ba:cd:9b:
1b:72:01:49:c0:f9:05:8e:88:88:96:8b:e9:41:e2:9b:9d:ad:
89:e0:90:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:10:10 2025 by rpki-client