Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yW0SR_XLoniur1KTUbX4HKVxcKM.cer
File: yW0SR_XLoniur1KTUbX4HKVxcKM.cer (raw, json)
Hash identifier: WunSKyK75dFaplitDaaxESB6vbKYTnwWf7qfYvBjseM=
Subject key identifier: C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0232A1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 21 Feb 2025 17:00:05 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 138529
IP: 103.127.254.0/24
IP: 2001:df0:eb80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 23:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144033 (0x232a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 21 17:00:05 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A9190E6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ff:56:ce:91:20:2b:d5:b4:58:4a:99:cc:c8:
62:c3:44:62:8c:d2:dd:43:b3:14:a8:35:b2:98:e9:
35:9d:dc:03:fb:54:34:8e:fc:14:0b:3e:0e:98:5e:
42:3e:71:a2:4e:45:2e:82:18:bd:dc:29:de:d8:9a:
4b:47:77:80:c1:f4:ec:86:1f:de:34:99:d2:11:74:
eb:f3:67:fe:65:59:00:7e:3a:51:9b:2b:97:99:e3:
35:52:d6:4d:53:04:1c:9a:47:7c:a9:85:ec:15:59:
a7:53:ed:91:de:ad:df:cd:81:93:95:dc:7b:77:15:
36:ba:35:b9:57:00:aa:0a:c5:bd:80:b2:12:1e:e1:
f9:ea:b5:0c:c3:f2:44:bc:8f:2a:b3:20:ed:27:cf:
1f:2f:3b:4f:15:d5:a5:35:42:f5:e5:13:89:3f:5a:
e5:90:39:7d:0d:9d:7d:5e:fa:8b:81:fd:9a:5d:af:
70:98:be:55:f3:07:91:6c:76:10:8d:14:6d:51:b8:
f5:6e:6f:2a:8b:1c:8a:25:b9:85:22:11:bf:a4:1f:
5a:12:08:52:47:d0:dc:d7:ed:1a:59:95:f2:bb:5f:
7f:17:3f:b4:c3:f7:93:99:6f:f2:87:36:56:eb:d4:
d3:af:a3:29:ed:48:16:ef:89:ec:f5:1d:96:b2:56:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6D:12:47:F5:CB:A2:78:AE:AF:52:93:51:B5:F8:1C:A5:71:70:A3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/9C69A732D49211E9AAE3C02BC4F9AE02/yW0SR_XLoniur1KTUbX4HKVxcKM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138529
sbgp-ipAddrBlock: critical
IPv4:
103.127.254.0/24
IPv6:
2001:df0:eb80::/48
Signature Algorithm: sha256WithRSAEncryption
88:c1:13:6b:ab:d6:d4:42:94:f4:38:b0:7b:47:c0:a2:ac:3f:
fb:f8:31:3f:02:56:9e:5a:d0:42:cf:ee:9b:8b:60:e2:4d:2d:
f5:32:71:ab:7a:81:61:8d:a1:fa:bc:e3:45:28:75:07:60:1d:
eb:57:1c:36:98:93:dd:6e:23:26:a7:02:cb:4e:96:f4:b9:42:
5a:be:dc:a4:ec:4a:16:e6:6a:56:11:48:97:b6:73:79:5c:b8:
b6:f9:91:c7:a3:d0:34:34:3a:dd:f8:b7:13:28:0b:38:49:a8:
42:9d:92:5f:f0:89:f7:ab:5b:d7:72:86:fc:2a:7e:1c:a7:aa:
cd:01:64:be:eb:8d:78:d4:a7:0a:a6:fb:40:da:5a:1f:4d:9a:
46:69:03:b2:9e:31:23:bd:65:0f:82:28:d0:24:b2:2a:da:58:
69:39:94:19:20:d1:a3:10:68:1f:d1:4e:f6:78:7a:5b:bb:8d:
9e:2d:05:d9:f2:84:80:ec:88:6c:6a:1d:d5:27:6d:7e:47:ec:
16:6a:dd:28:d0:56:d1:0f:3f:56:5c:c6:84:80:b2:01:ee:77:
c4:5d:28:48:07:42:42:a0:21:a0:60:8e:2b:ca:1f:2a:64:d7:
e6:15:f6:23:5c:90:f6:24:30:bd:0a:b0:bc:87:be:c5:27:b4:
91:c8:92:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 02:13:34 2025 by rpki-client