Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer
File: xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer (raw, json)
Hash identifier: eWrQwfz7aolbjgfAgXsfxtn/LHUI5s/EEuOf32FMbDc=
Subject key identifier: C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0234DE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 03 Mar 2025 12:58:12 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 149520
IP: 2001:df0:77c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144606 (0x234de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 3 12:58:12 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91243FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fb:25:b6:99:25:c8:82:ed:81:ee:cd:99:93:
cd:b4:9a:12:c1:2b:7d:6e:93:05:31:ba:7e:f8:76:
95:0f:b0:20:fd:26:6e:f9:9f:ae:4e:ea:2b:13:db:
90:29:80:d0:75:4f:a7:b2:27:34:2c:95:43:50:f4:
d8:ab:91:ee:08:5f:aa:9e:59:36:56:c1:ef:79:23:
8a:03:27:72:a4:2b:f5:7c:ee:5f:95:4b:0b:7d:69:
81:84:b5:0f:6d:89:48:92:90:20:32:13:3b:70:a5:
b5:d7:95:f8:6f:b7:1b:b3:e6:ea:69:1a:8b:f4:00:
b4:ac:63:08:bd:1f:bf:10:0b:f5:d4:77:2e:7f:e1:
29:25:e4:89:01:ce:01:f3:2b:d2:5c:a7:f0:6c:8a:
7f:c8:dd:fd:a5:65:91:16:c8:90:73:45:c0:77:45:
6e:77:60:42:78:ba:83:65:bd:74:86:2e:c6:b5:42:
a3:fd:c9:2a:88:2b:dd:d8:24:02:37:79:1e:22:3b:
fd:a0:b7:9f:f6:9b:bf:6b:ab:20:ec:ad:d6:6c:55:
44:f1:30:35:ec:82:be:d5:b9:2e:d5:6a:ca:73:11:
77:c5:52:ad:57:f3:03:b3:41:33:39:97:fe:eb:4b:
5c:e8:a7:b7:06:3d:93:69:fc:27:a9:9f:2e:b5:c6:
a4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149520
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:77c0::/48
Signature Algorithm: sha256WithRSAEncryption
a2:57:cc:cc:91:86:5f:67:13:35:d0:c5:92:c5:3f:7c:d0:ca:
7a:f1:a5:b1:7c:e6:80:f5:38:cf:68:97:22:ad:44:1f:89:e9:
eb:e6:32:be:23:00:1c:62:5e:dd:47:97:99:73:72:20:06:e1:
aa:82:c7:45:1f:ab:64:12:7a:f7:4a:7a:4d:7d:a3:5e:6b:e3:
fc:82:71:8a:87:f0:5e:6f:2d:45:56:e5:26:fa:37:c3:fd:9b:
94:e6:83:dc:6f:42:40:16:e9:2d:9a:c4:f6:16:f8:32:4b:ab:
38:9b:74:a6:c2:69:ef:47:ae:39:01:81:6a:75:1a:ff:4d:80:
04:7a:11:05:5d:cc:ac:77:f7:1e:d1:bb:28:03:12:e6:a3:e1:
f6:fe:22:e4:88:24:0c:72:56:bc:70:3c:e8:99:8c:18:41:e1:
f5:83:24:8b:2b:50:c1:56:a4:40:03:4f:fb:aa:4b:e4:c6:43:
78:0a:ba:dd:09:17:39:9a:f2:55:44:6f:18:5c:87:63:3b:15:
b9:1e:a4:9b:ae:47:dc:40:0a:4b:98:b7:5b:93:8e:95:b0:36:
b0:82:32:17:11:bf:c3:15:20:6a:3e:5a:d0:ab:f6:ec:51:0b:
5d:80:60:0a:22:80:de:df:04:c0:dc:68:bc:8b:bc:9e:04:35:
a0:fb:5d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:08:08 2025 by rpki-client