Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
File: y2yF51LVad_PHekEycvnHkg-9fI.cer (raw, json)
Hash identifier: tUsh5QUqQ0BRgjoD4Y0xnm5AFBelMrctSU1sx7bBbPs=
Subject key identifier: CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021FC7
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Dec 2024 22:21:33 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 133120
IP: 103.40.109.0/24
IP: 103.80.20.0/23
IP: 103.243.110.0/24
IP: 182.161.64.0/23
IP: 203.31.65.0/24
IP: 203.55.90.0/23
IP: 2407:d080::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139207 (0x21fc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 2 22:21:33 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91BC039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:9d:8e:2d:65:bf:5b:db:55:e8:83:68:af:
6c:15:08:75:ad:22:25:4b:35:d8:ff:fb:44:00:89:
35:2a:66:6e:70:5b:b6:2c:bc:d6:9f:e9:f0:bf:24:
4b:67:ed:52:cb:f2:28:46:42:5e:ae:71:35:b3:9f:
22:4c:1d:78:15:36:a4:e7:5d:d0:a0:83:32:cd:84:
c7:b8:0f:5a:86:22:93:df:c8:83:04:d6:bd:d3:fe:
e7:ed:be:f2:70:a8:e5:56:57:7d:e2:6e:59:17:36:
77:34:ad:3f:33:cc:93:3f:b8:83:12:ff:e3:81:f4:
95:0f:a5:a4:07:79:35:dd:ed:fa:68:1d:54:0e:46:
c7:f7:27:2e:4e:d2:05:fe:1a:f0:16:89:75:4c:17:
df:a5:ca:f4:0b:59:c5:5c:ca:19:5f:7a:62:75:6c:
18:ec:5f:5a:77:9e:92:e7:10:a6:92:d8:f9:98:ee:
66:90:4e:28:0d:33:4d:33:2a:4c:a3:47:3a:f2:2c:
d9:04:3f:07:ad:58:17:6b:d1:76:98:64:59:f0:5c:
f7:df:e1:69:70:d9:19:dd:03:2c:b7:7c:e9:8a:44:
c2:b7:ba:8c:0e:4a:b3:30:0c:a4:07:ea:b5:59:46:
09:96:a7:13:04:6f:dd:ce:92:c1:22:c0:de:d6:9e:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133120
sbgp-ipAddrBlock: critical
IPv4:
103.40.109.0/24
103.80.20.0/23
103.243.110.0/24
182.161.64.0/23
203.31.65.0/24
203.55.90.0/23
IPv6:
2407:d080::/32
Signature Algorithm: sha256WithRSAEncryption
a9:62:95:fd:73:5a:a7:23:b0:2f:af:52:09:5d:28:6a:69:cc:
1d:d9:44:8d:ca:0b:5d:cd:f4:10:05:55:95:82:3c:67:26:80:
97:96:6e:72:69:eb:57:6f:a5:4a:6f:59:2d:aa:2e:5c:12:0f:
fe:83:97:40:2a:b1:62:17:7b:96:55:c2:54:75:94:e3:7d:70:
86:7d:2b:89:ef:d5:f9:b1:94:af:d7:f3:73:d1:5c:72:28:c6:
c6:39:a8:c7:8b:62:49:f3:74:b7:f8:82:a7:74:c2:c7:df:b1:
1c:53:55:0b:03:b2:d3:d3:d9:ef:51:9f:0e:ae:c0:a2:d9:e7:
fb:eb:4e:10:df:d9:7e:18:c2:21:b5:93:33:36:74:04:e1:73:
92:75:5c:e4:78:67:89:5a:8e:7c:6e:52:d8:b2:ce:27:db:59:
2c:2d:9e:b2:4b:59:35:1c:a0:bc:2f:10:2c:66:64:48:41:8a:
b8:6c:ae:1a:7a:2d:c1:1a:53:ed:5c:c9:be:d2:20:0b:22:6a:
8a:01:0f:4d:dc:6f:1c:1c:3d:06:37:aa:cb:a5:cc:8b:f7:47:
e8:e9:a9:fc:5e:22:9c:83:ad:fd:2b:3f:23:d4:49:0d:64:a4:
c7:79:06:d8:b1:84:8c:f5:42:b4:2d:bc:74:fc:20:26:07:d3:
7f:01:6b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:11:34 2025 by rpki-client