Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
File: xIKbbAf9gE3wklz_wWHGcCgHoCY.cer (raw, json)
Hash identifier: ScYoCRTD8BcE794VPenQdrZzd/r9/78TE4VyR31AjQ0=
Subject key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023085
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 11 Feb 2025 20:31:37 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 103.207.68.0/22
IP: 210.16.120.0/22
IP: 2404:2a80::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143493 (0x23085)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 11 20:31:37 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91E7E45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9f:b5:8d:7f:b8:0e:21:3f:a3:64:b9:92:65:
b8:a7:62:7d:89:98:e7:dc:3c:e7:68:ec:5f:cb:f0:
1c:44:6e:1b:eb:75:33:47:2f:1d:72:f8:d8:ff:24:
6f:2d:fa:cb:dc:70:e1:d8:ba:00:99:03:56:ce:4e:
7c:da:80:95:88:77:8a:a4:e3:d6:e8:49:d0:6e:72:
18:38:3c:0d:c6:cd:b8:e4:bd:38:9e:22:a7:e2:ed:
5a:d5:0d:63:01:18:d8:d6:11:b6:a3:ff:87:12:58:
c1:7a:37:9d:5b:f0:19:30:77:b3:4f:33:ff:d6:7a:
af:69:2b:9c:c2:f7:a8:0e:7f:6a:80:2f:68:12:e5:
ae:a6:49:79:e4:41:a2:ae:83:ed:e3:27:d8:8d:67:
b8:09:ef:12:19:ae:bb:6d:97:fa:4c:fe:31:5a:89:
a2:b3:03:f0:33:a4:4e:49:74:7f:d6:0b:91:ec:3d:
12:51:85:e7:9a:c8:bf:7e:4d:5e:13:4c:b6:07:19:
ff:84:99:08:64:ca:78:98:50:c3:74:8b:46:3b:ad:
59:a0:dc:32:50:6e:04:71:cf:e6:ce:56:4d:da:34:
b4:0d:d2:65:f4:36:fe:6a:8f:11:95:99:aa:9c:70:
0a:70:02:d7:8d:54:52:4f:fb:fb:19:32:37:e5:b1:
33:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.207.68.0/22
210.16.120.0/22
IPv6:
2404:2a80::/32
Signature Algorithm: sha256WithRSAEncryption
19:c5:50:6e:c4:20:38:0f:cb:db:5d:10:d4:d1:ae:7a:35:80:
05:3b:f0:71:ce:db:b4:19:71:1f:6c:a4:eb:2a:0b:10:d1:15:
70:43:f8:52:90:b1:89:25:8e:46:90:c2:01:b9:a6:22:58:2d:
d3:e8:3d:ca:ac:45:7a:81:c2:2a:33:6d:9a:7f:ad:d7:63:0e:
07:a4:a2:2a:52:43:fb:1b:1b:cb:99:86:50:fa:42:23:4c:9c:
cf:0d:77:33:3b:45:d5:0d:62:05:d7:eb:be:15:9d:e7:f9:17:
27:e3:2d:c2:f4:76:56:2d:5e:d8:95:5f:e5:17:d9:f5:44:9a:
06:7e:d0:b6:42:0b:77:01:b9:3a:21:21:d9:9a:08:9d:f8:f6:
2b:68:ee:cb:3d:2a:f9:fd:5a:ba:a6:98:6f:9a:26:cf:7e:b8:
9c:69:b1:b0:ea:12:53:1a:5b:62:d3:d5:49:67:f8:0c:0a:f7:
c4:cf:36:47:4f:31:c6:e5:e5:b5:11:23:d2:24:70:98:7b:c0:
19:63:c7:b0:10:b8:e5:53:07:99:5f:e6:cd:05:e8:4f:f7:d3:
c1:8e:17:2c:8f:a7:4c:35:2a:75:26:07:c3:ea:a5:df:9a:d0:
b1:3b:5c:f0:66:bd:f2:f4:54:69:92:ca:f2:5b:e3:c4:ba:32:
4f:f4:b6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:12:40 2025 by rpki-client