Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
File: woh5_sEM6SnBzy5bl4hvHX6hfFo.cer (raw, json)
Hash identifier: yu/BG4UfEbP3AX/SSAlqlN442yXxahAyd0pojH0y2Qg=
Subject key identifier: C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023A86
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 28 Mar 2025 19:19:29 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 136395
IP: 103.86.108.0/22
IP: 202.181.4.0/22
IP: 2400:bcc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146054 (0x23a86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 28 19:19:29 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91B6EB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:33:3e:44:56:ac:d6:5e:06:2c:f3:04:29:
cc:ec:77:69:a7:67:51:fc:00:46:7a:1e:2e:7e:36:
d5:3d:0e:68:ec:b7:99:f3:9a:e9:ed:30:63:42:d1:
65:fe:8e:51:e9:1d:ed:fd:5d:44:09:e1:20:10:7a:
1e:e3:25:ad:ca:18:cb:f5:ca:b1:4e:31:e0:5a:79:
c6:e7:27:11:3c:80:7a:70:40:10:1d:35:d1:50:88:
27:cd:91:1e:57:44:1e:55:fc:67:83:a7:a6:c4:59:
17:78:cf:a6:19:35:67:ab:1a:ed:8b:49:e0:cc:27:
0a:86:e2:ae:94:b8:0d:d2:59:44:40:07:f3:5e:8a:
2b:f8:9e:12:04:ee:27:62:06:ed:b4:dc:7c:1b:d0:
34:3e:c9:f4:62:d9:78:49:55:cb:5a:b3:c8:3d:8b:
a4:00:a5:7b:20:ef:d4:84:99:f9:34:3c:52:65:79:
e1:1b:06:d1:38:31:59:79:0e:1a:3f:c9:4d:6a:7e:
e9:c3:fc:09:45:b7:6d:fc:9e:a1:e7:63:4c:ed:08:
44:c1:ae:2d:77:21:d6:ec:03:2f:7e:e2:e1:c5:4e:
8c:30:98:b4:48:13:49:2c:12:9e:cf:ba:49:b6:90:
52:d9:ab:25:f0:6d:9b:da:15:50:72:31:56:a0:e3:
04:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136395
sbgp-ipAddrBlock: critical
IPv4:
103.86.108.0/22
202.181.4.0/22
IPv6:
2400:bcc0::/32
Signature Algorithm: sha256WithRSAEncryption
a0:cf:99:c3:34:4f:57:76:d4:91:a7:17:8b:60:fc:7f:7f:b8:
40:6d:71:33:e5:af:b0:75:62:37:8a:e5:fb:5c:4b:ea:75:e5:
f3:68:df:10:66:bd:82:c6:54:14:68:5f:4c:62:5a:da:ac:f5:
48:17:f7:b6:18:e2:85:30:ee:72:f0:7f:df:c2:fd:cd:c0:b2:
d2:e0:3e:ab:28:b5:54:a8:7d:31:93:4d:ed:d4:1c:15:3a:cd:
37:6d:dc:c4:ee:60:d7:eb:7a:15:97:b9:a7:2c:ce:3a:b3:ab:
68:a5:67:a1:9c:9e:22:ca:c2:48:4a:22:cb:b9:6e:ee:43:b7:
81:ca:37:24:de:64:d3:25:4d:4f:03:48:7c:94:87:81:f7:88:
07:b0:9e:66:07:50:33:87:82:dd:fc:8c:2f:4a:1e:f3:5c:d6:
89:66:bd:05:30:72:7e:f7:74:2e:dc:2a:28:ae:72:42:be:bf:
bc:96:ce:c1:62:57:09:5f:22:81:f4:5d:e8:48:4d:3f:e4:2e:
65:45:c7:87:39:0b:fc:87:bb:eb:bb:05:1d:87:ba:d3:e8:ef:
f7:e8:f6:37:43:d6:9e:0a:b2:28:13:9c:d3:b4:06:25:53:99:
4e:fa:b6:79:85:37:9e:db:80:b1:57:ec:03:ce:3d:fb:37:46:
8a:f4:d4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:07:11 2025 by rpki-client