Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8FNQFd4Ri-cXZFYOlxxg28jwZ0.cer
File: y8FNQFd4Ri-cXZFYOlxxg28jwZ0.cer (raw, json)
Hash identifier: 8nVp2k2YM++zf57UVQY+DeKO0DbasCTM+U1wlRLEl70=
Subject key identifier: CB:C1:4D:40:57:78:46:2F:9C:5D:91:58:3A:5C:71:83:6F:23:C1:9D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0237BD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/y8FNQFd4Ri-cXZFYOlxxg28jwZ0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 16 Mar 2025 23:51:35 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 140697
IP: 103.151.236.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 05:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145341 (0x237bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 16 23:51:35 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A91B9C52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:37:99:e0:e7:8f:5e:76:0c:e9:ac:fd:b6:71:
1b:5d:ef:ef:b2:88:a8:98:f4:2a:67:a9:4b:0d:e2:
31:8c:ea:93:db:2a:14:a8:d0:8e:bc:fc:25:32:c2:
7f:18:eb:73:5b:99:b2:4c:f0:1a:f4:f7:c3:78:b0:
47:b7:38:d6:73:84:c0:8d:a9:e9:23:cd:b1:7b:1a:
6a:f8:a2:76:f3:02:a6:e9:67:a1:9e:df:04:2f:34:
17:1a:bf:6c:a8:99:be:9f:5f:b5:a3:c4:34:c7:16:
bc:e3:d9:dc:2d:70:82:e6:cd:a8:1a:a9:5f:54:cb:
6d:30:7f:a2:a1:fe:4f:02:49:be:fc:ac:0f:84:97:
46:8f:12:fd:36:eb:ac:15:86:fb:b2:81:f7:f4:d4:
07:15:e5:36:0d:4a:92:a8:77:d5:08:22:63:d0:c1:
41:1e:95:9a:4a:99:32:bc:b6:c0:af:b8:c9:32:80:
84:51:f5:4f:27:9f:0f:44:b0:6e:52:a4:ff:15:78:
67:e9:bb:10:69:14:bb:45:58:9e:7f:15:11:ce:31:
43:9c:d0:ff:f6:78:4e:2f:e2:9d:82:4e:fc:80:36:
c7:ac:33:53:e7:41:d2:e5:6b:68:51:a8:02:54:eb:
62:31:7f:18:00:43:d6:46:df:36:e1:a3:89:b4:21:
d4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C1:4D:40:57:78:46:2F:9C:5D:91:58:3A:5C:71:83:6F:23:C1:9D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/y8FNQFd4Ri-cXZFYOlxxg28jwZ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140697
sbgp-ipAddrBlock: critical
IPv4:
103.151.236.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:49:70:91:1d:91:69:cc:72:16:b7:1e:8e:a5:23:e4:91:a8:
f4:60:39:3d:60:20:20:1f:79:3f:29:86:96:bf:38:e9:aa:10:
3e:f4:7a:3a:66:b5:30:81:3d:2c:f3:a4:d8:10:0b:6c:19:d9:
7a:31:40:50:bd:40:57:d9:b2:52:bb:a8:47:9e:7f:ec:00:87:
54:28:80:62:09:f2:52:04:56:e5:5e:32:ca:32:e0:49:b5:f6:
56:79:71:c7:b2:ff:f9:2b:4b:25:63:23:36:2e:40:1d:6f:30:
01:f4:6f:51:3b:a4:bd:48:1b:b1:bc:09:4e:5d:9a:71:92:f8:
6a:b9:af:cc:41:06:04:7c:ef:2b:d5:35:e3:64:88:36:ee:c8:
1e:12:56:de:2d:ad:a8:29:9c:4c:69:31:90:23:37:9d:dc:53:
f8:51:60:92:ba:9f:30:40:01:f4:cb:b6:2d:81:eb:f5:52:a0:
b4:12:6b:17:93:57:2d:d5:e4:b4:22:8b:e1:00:48:e1:9c:15:
f2:1b:9d:6f:22:8f:9d:83:f3:d4:aa:70:0e:71:00:8a:29:38:
39:53:8b:da:32:74:79:d5:71:54:40:c8:19:ff:b7:46:5a:80:
dc:0c:cd:20:a2:a8:2d:8d:55:9b:6d:9d:63:41:e0:6f:04:f8:
63:7a:71:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:07:02 2025 by rpki-client