Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHCklbOD5Z1FcbaxfYqSiartGCU.cer
File: wHCklbOD5Z1FcbaxfYqSiartGCU.cer (raw, json)
Hash identifier: Hd73NwVb+Uda0orxIjQOwzcNMY6KlTFcPp8EY72nVe8=
Subject key identifier: C0:70:A4:95:B3:83:E5:9D:45:71:B6:B1:7D:8A:92:89:AA:ED:18:25
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022E70
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/wHCklbOD5Z1FcbaxfYqSiartGCU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Feb 2025 02:11:06 +0000
Certificate not after: Mon 02 Jun 2025 00:00:00 +0000
Subordinate resources: AS: 150422
IP: 103.38.208.0/23
IP: 2400:c060::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142960 (0x22e70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 3 02:11:06 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=A911AE4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:06:21:64:75:0a:0b:75:84:e0:07:65:a1:
90:96:eb:8c:8a:36:ab:79:d6:e2:08:2f:b5:74:db:
3f:a8:56:4a:49:7e:9d:6e:fc:ed:f8:3b:c2:47:15:
e3:61:60:32:04:bb:cc:7d:c7:07:57:db:a5:3f:75:
17:49:25:c2:29:71:d9:13:6a:ed:de:9e:7f:b1:df:
41:fe:ce:d3:50:84:29:99:29:e0:c2:fb:1e:cc:d0:
63:68:ca:a6:87:71:ee:25:84:c7:63:b4:db:aa:67:
a8:f6:e1:94:5b:c9:d6:3e:4f:72:0c:67:d2:04:ad:
1b:81:1a:c8:d3:8b:a5:09:e1:76:51:0d:fb:fc:52:
05:39:d4:0e:a2:75:ef:d0:29:39:ac:ba:0b:bf:57:
46:09:b9:ee:d5:43:97:d3:23:4e:32:c8:e9:f9:14:
cb:ca:85:6d:fa:6b:c0:83:34:5a:45:f9:99:a5:43:
4f:4d:13:07:6d:4c:50:a8:ed:4b:db:8e:00:84:f8:
6a:77:be:8e:73:8b:bc:43:4d:20:73:f2:51:64:e5:
d0:0d:e0:37:88:3f:e1:71:cd:e0:14:81:6d:0b:64:
5e:b4:6c:fd:7a:35:d3:b4:5d:4b:85:66:cb:74:b5:
39:a0:0b:57:bb:e5:b5:c1:04:bf:de:ef:f3:35:31:
21:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:70:A4:95:B3:83:E5:9D:45:71:B6:B1:7D:8A:92:89:AA:ED:18:25
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/wHCklbOD5Z1FcbaxfYqSiartGCU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150422
sbgp-ipAddrBlock: critical
IPv4:
103.38.208.0/23
IPv6:
2400:c060::/32
Signature Algorithm: sha256WithRSAEncryption
65:2c:33:15:37:7f:51:06:8b:be:8b:d0:fb:c7:d4:be:9d:55:
60:9c:04:29:8d:89:ce:52:bc:5a:cc:2c:df:9e:cb:ef:53:1b:
f6:06:a4:95:84:c5:b6:1c:00:8d:c1:cd:c4:13:44:60:31:97:
16:1f:60:0e:22:40:87:87:cc:7c:ca:0d:9e:83:3f:1a:d1:5a:
ac:3d:72:51:4d:c4:e2:ad:3e:7f:2e:de:69:08:3b:ae:36:c7:
03:45:a4:e7:df:82:aa:47:db:5a:15:91:89:39:c6:aa:dc:aa:
81:ef:95:0f:08:23:fb:94:b2:6e:82:96:a7:29:69:3f:ff:0f:
25:97:05:ae:85:da:9e:1e:32:be:3d:d9:48:76:63:0a:92:2f:
a5:44:f8:c4:ff:d8:68:a0:18:18:1e:71:91:1c:74:c6:57:3e:
e4:e3:eb:cb:7e:c3:5d:8b:4d:12:bf:66:53:4e:48:a0:1a:63:
d2:8a:14:10:11:c7:23:cf:7a:86:58:33:b2:e9:fe:91:75:c4:
b3:a6:c3:27:a2:fb:7e:98:8c:26:45:36:f6:75:ac:84:c7:2d:
16:2d:b2:3d:d1:ae:0d:fe:15:01:f8:8a:22:db:01:47:f0:30:
0d:65:b6:33:02:57:0a:f9:07:eb:1c:62:c0:52:40:6c:42:ba:
c8:86:a3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:37:33 2025 by rpki-client