Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
File: zNz_ISpraZpXC0qdF18WI3GDLKU.cer (raw, json)
Hash identifier: /n2mn5V2BnZEpWJJt1fBi9/pLXocQJPbg1Ii3mg6YU8=
Subject key identifier: CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0220BF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Dec 2024 05:38:08 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 24074
IP: 202.12.248.0/21
IP: 202.27.140.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Apr 2025 07:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139455 (0x220bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 5 05:38:08 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91BF23F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2d:7d:04:34:b2:0c:66:82:cd:89:ac:79:f0:
7f:56:4a:6b:5b:82:7f:2f:b4:02:1d:0d:56:ac:35:
0a:64:9c:09:f0:dd:fa:b9:22:cb:b1:de:d4:c6:80:
0e:1b:8b:75:f8:31:fe:f0:c1:49:6a:d8:d8:ed:d1:
96:6f:d6:57:40:46:99:3e:8d:35:4f:13:28:a6:f5:
41:f5:cf:af:a9:1e:6a:5e:dc:d3:b6:28:23:5b:36:
86:43:55:00:f4:ec:4a:8c:c4:29:4a:0a:70:1d:dd:
ea:70:ba:e7:5d:dd:2c:b3:ab:47:42:ce:a8:de:b5:
65:fa:81:cd:74:bc:b3:45:47:f7:ad:ba:11:b9:73:
17:bd:3b:25:ed:ea:23:70:63:97:3c:02:59:da:99:
f9:c9:88:0d:6d:f0:1d:33:a8:a5:28:d0:fb:b0:a7:
f7:42:06:0b:14:d8:eb:8f:01:c3:83:63:53:ff:0e:
12:82:a4:41:84:32:98:bf:9b:d2:1c:e2:09:cb:ad:
66:c1:67:8c:b8:a3:e7:46:11:fe:b2:64:87:8c:28:
6f:79:d8:89:25:02:46:ee:bb:b6:da:90:57:8b:0e:
31:eb:4a:fb:4c:e6:01:60:87:99:a0:c1:bf:cf:10:
f8:6b:d9:bc:5d:51:7a:b0:3a:88:3f:fd:d5:07:60:
ae:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24074
sbgp-ipAddrBlock: critical
IPv4:
202.12.248.0/21
202.27.140.0/22
Signature Algorithm: sha256WithRSAEncryption
73:b1:f4:9a:f7:4f:98:77:81:14:0d:67:7e:55:8a:6d:7a:ea:
6e:46:42:b1:6e:3b:1e:93:ec:09:22:ac:33:f3:e0:da:d7:c1:
00:65:5e:45:bf:83:cd:4b:39:5d:a9:40:ca:a8:60:c5:4b:a0:
87:2f:2d:73:ee:cc:00:7a:c5:96:46:2e:b0:56:9e:c2:56:e1:
c9:19:41:53:a6:39:fd:1f:79:48:71:ca:ab:cb:f3:11:43:4b:
5c:fe:23:d3:91:24:82:7b:a5:50:60:07:a6:98:54:b0:36:32:
49:13:33:d8:01:16:62:81:e0:32:97:aa:5f:e3:75:84:5a:52:
a2:4c:64:4d:4a:a5:3a:19:d3:43:60:ee:1c:00:b0:9a:7f:35:
91:34:36:5b:a6:76:4b:6f:38:c7:9e:cd:fa:28:87:43:bc:a0:
79:93:3c:b6:93:00:8e:4c:65:f1:32:22:7b:c1:10:43:58:1e:
8a:08:19:54:7e:b1:29:df:e9:97:9b:dc:d6:9f:00:f0:ea:75:
41:09:96:aa:b1:c8:3a:4c:71:50:c9:13:ee:92:47:91:b7:df:
2a:9d:70:2e:a0:b1:16:d9:2f:c2:54:52:eb:08:4d:21:8e:a7:
75:8b:f0:ac:bf:80:a8:cb:f0:4e:c2:87:87:4a:53:6c:98:c0:
58:e6:5e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:54:10 2025 by rpki-client