Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer
File: tRT6pSOY594ly7jXeUObHjA3Rw4.cer (raw, json)
Hash identifier: z0euJx81AAlJ0IZ9nIA7/+vBdNsLZcrGt0wpxPR91sY=
Subject key identifier: B5:14:FA:A5:23:98:E7:DE:25:CB:B8:D7:79:43:9B:1E:30:37:47:0E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02317C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 16 Feb 2025 02:57:57 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 153488
IP: 2401:f020::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143740 (0x2317c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 16 02:57:57 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A919874A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:36:bf:cb:e9:0b:a1:b9:93:72:90:e4:a9:
ef:fe:fd:1e:70:ef:f6:a0:ac:40:2a:68:53:39:d2:
d9:ae:5f:68:9b:cc:40:50:d3:eb:0c:2d:32:76:c5:
db:99:db:39:3e:d9:5f:8f:2a:06:50:84:31:33:ff:
af:e3:61:ce:3b:74:1d:e5:23:12:ca:07:d4:14:6c:
5f:41:71:a6:83:9b:c2:01:8a:e1:2c:16:f8:d8:de:
96:b6:08:32:ef:30:cb:e0:f0:28:74:56:9f:37:3b:
be:14:7f:54:d2:53:bb:a4:64:51:6a:5b:dd:96:67:
1d:30:16:7c:ea:86:e3:8f:0b:4b:70:9f:88:6c:34:
0c:3e:c1:cc:b2:bb:08:0b:b3:e2:cd:90:6f:7a:fd:
45:e0:98:08:8e:1a:eb:15:b4:97:16:80:c9:e2:2e:
20:7d:d7:43:fa:bd:e7:43:43:a0:4b:f5:9f:a3:28:
c8:3b:62:ce:52:73:c2:3a:c3:4a:b3:3f:92:b5:91:
0b:39:44:0f:c2:02:a8:61:af:1e:73:59:ca:25:1f:
58:81:07:36:02:59:f1:e7:61:76:e3:4c:fe:32:67:
1a:39:9d:f0:be:b6:81:4a:26:96:f7:fe:24:52:db:
0e:4c:b1:da:c8:4b:94:5c:b6:88:22:b0:b9:75:0e:
78:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:14:FA:A5:23:98:E7:DE:25:CB:B8:D7:79:43:9B:1E:30:37:47:0E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153488
sbgp-ipAddrBlock: critical
IPv6:
2401:f020::/32
Signature Algorithm: sha256WithRSAEncryption
64:c1:ba:2b:da:56:f9:5b:55:e4:97:6f:a7:dc:e9:6d:f5:21:
e9:77:c0:ba:e1:a2:e3:5c:9d:93:4a:d9:18:de:df:df:44:8a:
df:b9:63:00:83:43:bc:5e:55:3c:c5:11:95:70:83:91:3c:15:
38:3a:cb:93:61:7b:40:31:06:ab:44:f4:5f:5a:fb:19:fc:6a:
ea:c7:51:79:21:80:1f:76:b9:9f:83:dd:dd:20:5d:5a:4a:fd:
94:75:df:d8:d0:ab:b8:ac:40:d7:38:48:67:85:91:8c:47:5a:
1e:6a:b5:67:de:d8:97:25:d3:2a:e5:b2:6c:b2:e0:ed:9a:d8:
73:95:23:2c:f9:f8:1b:8d:6a:11:6b:30:36:b8:77:fd:69:97:
58:f1:25:94:fc:da:e4:86:64:d1:b0:4f:99:b4:d8:2a:7b:2d:
d8:d7:cf:3a:e6:eb:84:33:52:0f:5c:39:f5:b1:46:d9:37:10:
a8:60:fa:71:85:1a:71:01:07:d6:27:47:8d:12:15:e5:24:cc:
2e:fd:28:7e:fb:be:32:16:10:64:46:37:01:86:8b:b0:af:b5:
a1:86:d9:a9:c1:be:6f:e2:8a:48:5a:12:5b:d3:e3:9c:f0:83:
52:c8:bf:93:f9:0d:d9:f4:f4:0f:f7:a3:f4:ea:cd:45:26:48:
2a:7c:8f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:11:35 2025 by rpki-client