Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VYp3mJDm7AepHisFcom6ZWpeGQ.cer
File: 2VYp3mJDm7AepHisFcom6ZWpeGQ.cer (raw, json)
Hash identifier: 1fZxJnvHMIk16QAUI5t8q1XnhpuGIPdE88ZPK62S9bI=
Subject key identifier: D9:56:29:DE:62:43:9B:B0:1E:A4:78:AC:15:CA:26:E9:95:A9:78:64
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0224CE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 26 Dec 2024 09:29:33 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 140661
AS: 152903
IP: 103.151.115.0/24
IP: 2001:df3:bf80::/44
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Feb 2025 03:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140494 (0x224ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 26 09:29:33 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A913854D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:07:09:48:8c:5d:97:6c:65:48:a9:5a:b8:
ee:ba:74:e6:d6:d0:9b:f5:ce:5b:16:84:96:1e:f3:
fb:07:c8:e9:8f:4e:b7:6d:0c:f3:bc:19:32:19:9f:
d8:a1:76:a4:61:2a:29:35:66:fc:0b:ec:85:32:b2:
a7:09:91:08:0c:2a:fc:42:19:b4:60:25:38:92:1a:
b6:0f:3e:e9:94:06:96:78:fd:29:e5:8b:f5:ef:12:
a0:07:66:05:31:1f:33:54:6d:b0:d2:69:64:14:34:
0e:94:15:6b:95:da:ad:a1:97:d1:a9:e1:91:bc:01:
a5:05:68:55:ce:a5:58:df:de:83:42:e3:88:68:e4:
fe:26:07:08:89:52:c5:a0:ec:f0:71:0e:5d:17:ed:
b6:f6:af:5e:fd:5e:20:a5:2a:eb:f3:e1:33:c2:a1:
73:82:a5:07:e7:e3:32:3a:44:a3:05:3f:45:8e:0a:
d0:7f:4a:1d:8c:c9:9e:8f:0b:0d:80:2f:f4:59:cc:
47:6f:98:7c:40:b1:e6:d5:dd:69:cb:5f:4f:6f:01:
91:be:59:ba:33:52:19:6d:d2:9f:5d:f7:3c:dd:1f:
e0:0c:03:37:ce:40:64:ce:17:8d:9c:a1:ef:1f:67:
c6:25:09:90:9a:03:53:8c:07:dc:6f:20:5c:86:56:
20:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:56:29:DE:62:43:9B:B0:1E:A4:78:AC:15:CA:26:E9:95:A9:78:64
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140661
152903
sbgp-ipAddrBlock: critical
IPv4:
103.151.115.0/24
IPv6:
2001:df3:bf80::/44
Signature Algorithm: sha256WithRSAEncryption
3d:f8:aa:b5:c0:e8:e4:77:66:14:2f:96:33:f2:a7:0e:e6:12:
2a:d2:47:e1:7a:2d:b6:2e:c4:75:c0:61:3e:85:bf:f4:6b:40:
b0:05:9d:14:db:f0:b1:d0:d2:6f:ce:01:34:df:ff:6c:3f:4f:
94:4c:1c:64:7d:4f:66:4d:ce:93:43:a5:8b:b9:23:52:71:75:
e6:7b:ec:76:8e:1e:6f:99:cf:f4:35:36:07:2a:4a:4b:d2:06:
9c:ca:9d:05:12:89:49:60:74:32:23:c0:69:e7:9b:fd:7f:7f:
5c:25:6d:84:36:0f:ba:a1:43:dc:78:aa:37:0f:40:f5:49:1e:
1a:45:4a:3d:68:c0:2d:64:06:91:2e:c9:71:31:bd:2a:9b:7a:
0d:58:3d:4d:df:09:e8:bd:ef:09:49:68:e6:6a:18:2e:8e:4e:
58:61:de:08:24:f4:49:1a:fa:63:40:fc:b3:a7:a0:7a:ad:cf:
0b:60:37:f7:c7:7a:85:a9:28:9c:b6:0d:c9:18:37:09:99:ad:
24:c7:c0:cf:82:6a:b2:d3:55:5d:64:d2:57:f4:ab:a0:6f:41:
14:74:a6:10:b8:db:58:01:c5:d0:0b:f7:86:00:31:54:63:c9:
29:7c:6b:99:89:f4:1f:fb:94:3b:8f:4e:51:67:79:85:75:54:
68:0a:f5:f3
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIDAiTOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTIyNjA5MjkzM1oXDTI1MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzg1NEQxMTAvBgNVBAUTKEQ5NTYyOURFNjI0MzlCQjAxRUE0NzhB
QzE1Q0EyNkU5OTVBOTc4NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0/wcJSIxdl2xlSKlauO66dObW0Jv1zlsWhJYe8/sHyOmPTrdtDPO8GTIZn9ih
dqRhKik1ZvwL7IUysqcJkQgMKvxCGbRgJTiSGrYPPumUBpZ4/Snli/XvEqAHZgUx
HzNUbbDSaWQUNA6UFWuV2q2hl9Gp4ZG8AaUFaFXOpVjf3oNC44ho5P4mBwiJUsWg
7PBxDl0X7bb2r179XiClKuvz4TPCoXOCpQfn4zI6RKMFP0WOCtB/Sh2MyZ6PCw2A
L/RZzEdvmHxAsebV3WnLX09vAZG+WbozUhlt0p9d9zzdH+AMAzfOQGTOF42coe8f
Z8YlCZCaA1OMB9xvIFyGViALAgMBAAGjggMlMIIDITAdBgNVHQ4EFgQU2VYp3mJD
m7AepHisFcom6ZWpeGQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTM4NTREL0U3QzhERDJFQzM2QjExRUZCQ0JDNUIxNkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzODU0RC9FN0M4REQyRUMzNkIxMUVGQkNCQzVCMTZDNEY5QUUwMi8yVllwM21K
RG03QWVwSGlzRmNvbTZaV3BlR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAiV1AgMCVUcwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBABnl3Mw
DwQCAAIwCQMHBCABDfO/gDANBgkqhkiG9w0BAQsFAAOCAQEAPfiqtcDo5HdmFC+W
M/KnDuYSKtJH4Xotti7EdcBhPoW/9GtAsAWdFNvwsdDSb84BNN//bD9PlEwcZH1P
Zk3Ok0Oli7kjUnF15nvsdo4eb5nP9DU2BypKS9IGnMqdBRKJSWB0MiPAaeeb/X9/
XCVthDYPuqFD3HiqNw9A9UkeGkVKPWjALWQGkS7JcTG9Kpt6DVg9Td8J6L3vCUlo
5moYLo5OWGHeCCT0SRr6Y0D8s6egeq3PC2A398d6hakonLYNyRg3CZmtJMfAz4Jq
stNVXWTSV/SroG9BFHSmELjbWAHF0Av3hgAxVGPJKXxrmYn0H/uUO49OUWd5hXVU
aAr18w==
-----END CERTIFICATE-----
Generated at Thu Feb 6 07:00:57 2025 by rpki-client