Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
File: -Dcw_Tkbb492_vMXbtufxvVUHkA.cer (raw, json)
Hash identifier: T7XkZYSFQsSOYGu5G/5BwILBNTqrDswEKcAHy9HfYYI=
Subject key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022ED9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 04 Feb 2025 13:57:24 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 38901
AS: 131178
AS: 137066
AS: 138429
IP: 27.96.84.0/22
IP: 43.245.32.0/22
IP: 43.252.16.0/22
IP: 45.115.80.0/22
IP: 45.115.208.0/22
IP: 45.118.76.0/22
IP: 49.156.0.0/22
IP: 58.97.192.0 -- 58.97.231.255
IP: 103.9.188.0/22
IP: 103.12.160.0/22
IP: 103.30.196.0/22
IP: 110.74.192.0/19
IP: 113.130.124.0/22
IP: 119.82.248.0/21
IP: 163.47.12.0/22
IP: 163.47.172.0/22
IP: 202.58.96.0/22
IP: 221.120.160.0/22
IP: 2400:4880::/32
IP: 2404:300::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143065 (0x22ed9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 4 13:57:24 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A913621A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:4e:6e:f7:91:51:41:d2:12:0d:3f:95:63:
45:9e:ca:b4:0b:6a:2a:2f:99:72:98:e5:f3:42:35:
28:5e:68:2a:2b:02:55:3b:80:47:37:b6:eb:13:c2:
fc:00:8e:cd:a0:51:8a:f4:f9:e4:46:4c:27:26:04:
3a:e3:de:32:d9:d4:5a:36:d8:fe:87:84:bb:2c:de:
c9:f3:be:0d:14:ae:96:de:dc:bd:13:9d:0b:01:52:
25:6e:08:71:5c:05:65:96:8c:a3:8f:22:4e:09:91:
f7:50:93:5b:7d:02:67:e2:f1:7f:01:a5:a0:84:e5:
b1:52:e0:b2:c4:39:43:8a:a7:d2:c0:2e:d4:9e:e3:
a8:c3:ef:a5:07:6c:58:09:c2:be:92:40:f4:5c:84:
fc:f2:da:ca:17:22:83:2f:d0:ca:2f:6b:13:1f:7c:
eb:c8:c8:49:43:e1:20:1d:09:31:4a:1c:71:98:37:
e3:5d:b8:df:03:11:f3:09:bc:8d:ce:fe:29:e8:4c:
c9:38:64:73:6b:a1:6c:21:08:39:46:1b:46:19:f0:
7f:ab:c1:38:e7:0c:75:9f:67:44:c6:07:10:6c:1c:
ec:90:ed:50:c0:42:f7:79:df:d0:95:54:8d:c4:8b:
29:99:de:e9:3d:39:f1:bb:10:a9:87:30:32:dc:19:
25:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38901
131178
137066
138429
sbgp-ipAddrBlock: critical
IPv4:
27.96.84.0/22
43.245.32.0/22
43.252.16.0/22
45.115.80.0/22
45.115.208.0/22
45.118.76.0/22
49.156.0.0/22
58.97.192.0-58.97.231.255
103.9.188.0/22
103.12.160.0/22
103.30.196.0/22
110.74.192.0/19
113.130.124.0/22
119.82.248.0/21
163.47.12.0/22
163.47.172.0/22
202.58.96.0/22
221.120.160.0/22
IPv6:
2400:4880::/32
2404:300::/32
Signature Algorithm: sha256WithRSAEncryption
44:c0:87:62:0b:e2:0d:f7:6c:a9:df:f8:04:3e:ba:d5:dc:0e:
09:87:69:a5:fa:4d:2f:57:28:ba:50:f5:b3:d8:7b:87:d9:e5:
c7:ca:5e:dc:3c:bb:e9:ff:65:25:db:a4:df:a6:e2:4f:c1:a2:
41:31:fc:9b:5e:bb:0f:b8:ad:e6:21:04:e6:6b:70:d4:83:ab:
d3:8f:d7:25:24:7d:bd:db:b8:09:cb:bb:a2:72:0b:f9:04:6f:
2a:7e:ac:86:56:96:29:54:82:2b:97:c1:0f:c1:9b:e4:60:4c:
ac:56:df:43:2f:90:9d:43:13:85:cd:36:7c:e4:ab:31:2a:71:
34:7c:0e:63:59:c4:9d:6a:0b:80:f9:f4:dd:45:66:19:eb:74:
8f:12:59:10:69:1c:b9:28:4c:48:92:b5:92:70:4b:6b:5e:e1:
a0:3b:c3:97:97:35:3f:0d:c6:0d:2a:76:98:2a:0b:a0:18:5e:
a7:cd:fe:cd:b3:5a:10:01:cf:9c:40:3c:e5:57:02:28:94:df:
af:39:94:11:d1:d1:4d:87:1e:85:7d:37:8a:b8:08:d8:50:69:
49:a6:9d:df:48:75:32:6d:f9:41:20:a2:1f:ad:79:89:78:8d:
8e:2a:e6:55:95:5f:22:50:a5:54:ef:75:d4:ef:48:b8:7e:ae:
17:c6:1e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:03 2025 by rpki-client