
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer
File: u6lOqRCj8jLfn98s1OOiejSZa3A.cer (raw, json)
Hash identifier: x5E5KylGu3xHwLJmchnzXTXV5WQ9E3N1++SIXSIVMQE=
Subject key identifier: BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022B76
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 25 Jan 2025 14:24:03 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 149293
IP: 103.178.32.0/23
IP: 2001:df3:4640::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142198 (0x22b76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 25 14:24:03 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A917BEB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:0e:65:36:a6:cb:22:9f:b8:a8:9e:3e:c4:
3e:24:e9:57:dd:32:7b:a3:29:0a:f1:ca:9d:64:67:
8d:4e:e0:67:44:cd:46:81:ab:eb:b0:12:54:94:ce:
5d:93:5c:80:ee:43:f3:75:ac:71:98:d3:fa:29:31:
21:b7:a6:4d:f7:51:0d:62:4f:3e:97:16:38:8c:a8:
d5:c9:a1:da:a4:77:17:6b:eb:42:7a:42:3e:86:e4:
a6:8f:96:ab:6e:02:20:3a:bb:32:f5:a7:b9:16:c5:
85:20:23:f0:7f:1f:b0:4a:81:61:5c:48:a3:5d:fa:
47:5c:08:34:6c:9a:3d:7e:b7:01:88:5e:d0:29:3c:
f2:9a:fc:4c:8b:a8:36:da:79:56:b5:7a:08:eb:ac:
83:08:2b:89:23:e1:cf:0d:f3:a0:3e:bb:b3:f5:4a:
a8:b1:19:80:91:df:7a:b6:7d:21:b9:14:80:56:8c:
d7:d8:98:ce:6a:b5:46:08:e1:7c:c6:d0:40:bf:a7:
57:83:7e:fe:5d:eb:d4:85:56:4f:8a:27:99:bd:33:
64:fc:60:52:6a:f7:2f:0f:b4:f3:de:90:18:32:43:
5c:74:49:98:5a:82:d8:b3:c1:e4:86:d0:7f:30:91:
47:6e:ff:dd:e6:72:e3:98:ef:c5:5c:6d:56:18:f8:
76:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149293
sbgp-ipAddrBlock: critical
IPv4:
103.178.32.0/23
IPv6:
2001:df3:4640::/48
Signature Algorithm: sha256WithRSAEncryption
da:37:89:05:29:85:26:52:6b:97:7d:58:f8:ea:e5:54:1f:49:
19:4e:50:f4:20:e5:5c:dd:41:d9:43:6a:8e:67:9f:ea:1e:da:
90:63:f1:95:4d:15:12:bd:45:e4:12:16:3e:19:f1:d0:53:3f:
cc:36:e3:94:66:04:14:a2:00:34:47:60:d5:70:86:6a:6a:2e:
38:ca:cd:74:f7:2c:c5:3b:01:cb:75:a2:3e:39:ca:db:89:08:
63:ff:6d:fd:76:9a:dd:74:e0:04:f3:6f:65:33:b9:73:29:5d:
02:1f:f8:d1:7e:42:d6:e3:e8:e4:34:b9:77:ee:f6:a3:99:d0:
63:b9:a1:bd:47:51:e9:66:9d:05:34:61:7b:b8:b4:74:a4:3e:
25:4c:f4:73:38:a2:9b:e0:1d:a9:d5:a6:ea:de:a7:1a:b7:04:
f5:d2:db:00:4a:2b:aa:f9:a8:b9:64:10:37:49:8b:6f:c7:3f:
5e:cf:b8:aa:67:16:e4:f3:28:25:cc:ec:4c:e4:4d:0f:1a:0e:
b4:0a:e1:2c:2e:57:40:09:6a:07:48:fa:83:98:e4:3a:d0:d2:
96:10:db:e8:be:65:37:17:2c:05:38:25:46:1c:6b:ce:34:45:
88:26:ad:2a:71:c9:f9:bd:ba:69:df:d7:d2:b3:9b:cb:48:bc:
37:8d:31:ce
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:13:30 2025 by rpki-client