Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
File: xQRWVXeumfYZHJeDPdvdYk7CTpI.cer (raw, json)
Hash identifier: 1Ag9mDi8QmsLqyc7KFtJ4YIGp52PPOK/9L66yzLIsag=
Subject key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0236AC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 10 Mar 2025 16:06:19 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 103.160.100.0/23
IP: 2406:e840::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145068 (0x236ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 10 16:06:19 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A916D128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:64:2f:58:ea:73:55:b8:c4:c5:5b:33:0d:
fb:a4:d1:10:79:b9:99:66:b1:ed:ea:28:32:49:e7:
4f:08:dd:a4:27:64:28:8d:f7:cc:f1:f7:bc:47:37:
d8:6c:47:43:db:6d:b4:74:04:ba:e9:d7:00:78:00:
d9:80:96:61:0f:eb:fd:0e:c9:09:ef:00:3d:f9:f4:
52:e8:f1:d5:7f:dc:b4:1e:f1:c5:5b:c2:45:21:b7:
a4:14:78:eb:34:51:5d:d7:f4:14:df:95:de:02:fd:
6e:6b:98:94:b3:e6:93:9b:66:a6:37:cd:49:48:10:
e4:8c:bd:60:6b:d9:a0:a1:15:62:6c:b6:71:01:12:
72:3e:01:58:60:89:1b:df:4e:e6:e2:4b:9a:42:4b:
64:8a:b3:5a:27:bc:fc:0e:15:82:49:cd:1d:88:38:
42:b8:ea:74:81:29:a3:bd:b5:b8:0e:cc:63:c6:a7:
49:a2:01:7c:ce:c1:06:c1:c4:95:62:42:42:db:a3:
6a:e2:9f:f4:7a:44:d0:e0:68:4e:af:ef:14:87:3d:
0c:d2:7c:94:d7:ba:b5:e5:52:00:50:e7:e0:42:2f:
27:3c:a0:70:50:e5:27:fb:4f:47:21:cb:f9:2a:2b:
03:62:4d:ed:08:90:f0:13:2b:86:c9:e9:28:6e:0a:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.100.0/23
IPv6:
2406:e840::/32
Signature Algorithm: sha256WithRSAEncryption
9c:50:8a:9f:75:eb:4f:1b:41:08:4d:fd:5e:95:c6:41:1a:b2:
29:f9:9d:d0:ae:9a:3c:6b:bc:52:00:d1:4a:a4:dd:e3:52:32:
25:c4:f3:1e:ab:57:e8:63:81:20:f4:bc:b1:37:8a:49:d9:90:
00:70:04:19:31:ec:26:04:d9:83:b7:24:de:2d:38:ed:24:3c:
68:b4:a4:cb:a4:2e:c6:28:9e:07:20:71:18:61:ec:a7:49:10:
53:4d:66:1f:33:f5:f4:0d:d0:8d:87:74:d0:b9:ba:53:62:29:
ed:62:4b:83:b2:aa:c3:b2:05:53:9f:5d:ce:d6:78:98:ef:bb:
6f:c7:13:8e:b4:83:8f:ff:b2:70:55:3f:29:96:57:60:5e:4f:
84:ab:87:b1:69:93:07:95:e4:18:47:14:ad:92:52:dd:aa:38:
f3:f8:59:ff:09:fd:74:48:be:57:3c:54:ad:b1:4f:cd:ac:89:
cc:a6:68:51:eb:57:bc:46:fd:9f:06:fd:9f:7f:f2:24:20:e4:
80:5f:11:ad:3d:f2:e4:12:a1:be:f4:80:ec:bc:98:b0:e2:35:
c5:33:e0:8a:21:33:d5:2a:fd:21:b3:ad:1e:91:85:fc:05:18:
81:2e:7e:f0:03:85:c9:88:b6:35:94:bc:a6:83:db:8c:c5:87:
05:b3:12:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:11:41 2025 by rpki-client