Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer
File: v7abwiV2uVe6tf8za36DWNy3Cio.cer (raw, json)
Hash identifier: AvwqpVW1oysaePu/Xc7LQjmIWUsQYNILlhiE04uG3zQ=
Subject key identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022A01
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 17 Jan 2025 18:48:48 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 55915
AS: 136776
IP: 43.231.208.0/22
IP: 45.64.160.0/22
IP: 45.123.220.0/22
IP: 49.236.212.0/22
IP: 103.1.92.0/22
IP: 103.51.16.0/22
IP: 103.192.76.0/22
IP: 202.94.66.0/24
IP: 2407:5200::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141825 (0x22a01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 17 18:48:48 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91D5BFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:37:ee:05:d0:d1:88:c8:9d:fa:b9:da:62:06:
24:4f:7d:d6:ad:6c:eb:36:a3:80:7a:13:89:05:bd:
5b:13:32:7d:ea:75:1d:d5:e1:37:90:92:83:8c:e2:
f4:95:c5:27:44:fc:f6:68:4b:d6:23:f9:9a:f4:84:
a0:d8:a4:45:f6:c1:54:21:be:ae:f1:09:e7:12:98:
13:65:5d:12:72:41:89:f4:87:5a:44:3e:0f:47:4a:
66:de:ba:b9:20:61:72:d3:36:3e:68:f1:32:3f:ab:
2c:26:58:96:f9:17:da:6e:71:95:ac:fe:d1:db:a6:
d6:e1:39:e9:a9:ed:bb:78:9f:73:f8:2d:ac:af:8c:
58:0c:d8:2c:2a:7e:36:88:32:92:c8:f0:04:d9:4f:
92:d2:bc:d8:03:9a:2c:51:45:8e:05:d4:c9:95:03:
a9:8a:1a:75:9f:b5:ec:95:05:48:34:3a:d7:24:27:
4c:99:98:14:99:05:e3:14:85:02:41:d6:21:b3:d0:
41:df:64:e4:e7:09:9d:6b:fe:1c:f9:39:4a:65:6c:
ae:e8:f8:e2:f0:18:aa:6a:a0:df:4e:e2:40:ff:a4:
4e:43:d0:ed:0a:0b:90:62:8a:07:ea:b5:7c:f7:b2:
6a:13:a7:af:7c:b1:3e:c0:3c:c3:2a:1f:43:74:86:
94:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55915
136776
sbgp-ipAddrBlock: critical
IPv4:
43.231.208.0/22
45.64.160.0/22
45.123.220.0/22
49.236.212.0/22
103.1.92.0/22
103.51.16.0/22
103.192.76.0/22
202.94.66.0/24
IPv6:
2407:5200::/32
Signature Algorithm: sha256WithRSAEncryption
c3:89:fa:13:94:fc:39:bf:52:83:9e:f9:6b:7c:2a:3c:08:13:
4e:4c:1d:56:bf:fc:85:c2:18:0c:79:9f:b3:4b:a1:50:63:18:
14:89:74:67:d9:c8:32:8a:e9:c2:bb:06:29:ed:d7:7f:fb:d6:
54:51:ab:23:73:f6:5f:f5:4a:59:11:12:7e:f4:3b:ff:77:80:
4e:db:0a:69:20:a3:47:c6:45:68:72:0a:d8:9a:7f:f7:6c:78:
02:e8:c8:90:f3:e7:4b:ef:52:e8:6d:70:a9:9c:35:8c:63:b4:
b3:33:72:92:76:9e:5f:ec:59:4f:8e:de:28:33:bc:ea:fe:1a:
eb:a8:99:84:f3:d9:f7:bd:df:31:d8:f1:ff:25:e4:a7:3a:f8:
44:87:c1:77:e3:4c:45:c8:d0:72:d1:e7:5f:9b:59:f6:d5:70:
f2:fe:1b:02:3f:5a:e7:1c:2e:61:80:24:ba:af:5b:a2:aa:51:
71:13:55:20:96:ee:ab:31:9d:5d:1a:48:03:3c:a7:8d:ec:14:
95:68:58:45:b0:0b:3d:66:2f:93:78:37:57:7c:44:f9:29:0b:
4a:87:93:d9:a1:63:5f:3a:09:a8:a6:7f:eb:1d:b7:63:19:07:
b5:3b:ea:86:87:78:45:a8:e7:3c:d3:a2:73:70:85:90:65:1b:
d7:5d:56:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:42:23 2025 by rpki-client