Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer
File: 2cYV0QtB5uVphlzKp_4oDRKOMRw.cer (raw, json)
Hash identifier: CRxttMEiuFy4alJRhHIazeg6Ibp41u9uP3Ipe4r4v2o=
Subject key identifier: D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021F76
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Dec 2024 13:23:31 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 45499
IP: 103.5.60.0/22
IP: 110.5.64.0/21
IP: 111.235.80.0/20
IP: 116.206.224.0/22
IP: 203.118.244.0/22
IP: 2401:bc00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139126 (0x21f76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 2 13:23:31 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91293E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:4e:c0:c6:73:51:a1:ea:b5:c7:16:3f:19:
a1:6e:6b:ca:01:04:29:36:59:e5:ad:78:15:b6:8c:
bf:02:4d:f2:34:da:90:61:4e:45:c5:4c:2f:c5:93:
d0:8c:bf:f9:ad:c6:9c:39:79:44:12:d2:ae:7f:ed:
4d:20:3b:f6:95:cc:1f:e7:91:3c:05:bc:37:5a:b4:
d5:83:43:d4:5a:84:58:90:ec:8d:8f:5b:93:de:59:
1e:e6:cf:fb:00:71:70:7b:10:0b:ab:73:e7:56:c1:
23:24:60:aa:86:22:b5:3c:d6:0e:e5:19:66:8f:b9:
81:89:6e:e5:c2:1d:9a:4f:0b:05:01:09:77:f6:4a:
c5:c7:5e:6f:5d:7c:c2:d9:fb:3c:74:38:e6:15:50:
59:be:1b:ab:12:17:b5:43:03:c0:04:f0:3e:60:c5:
02:4c:63:47:c4:17:57:d7:bf:51:92:79:d8:5d:0b:
37:27:a6:2a:87:30:88:20:5a:93:da:b4:7c:90:0a:
17:3e:29:86:04:99:75:61:69:b9:8d:82:70:8f:9b:
fd:a6:60:05:58:74:c9:ee:f2:2c:1f:1a:61:9b:14:
ef:5f:9e:7f:de:d2:d9:a2:a8:00:57:0c:e2:62:35:
d5:bf:f8:f2:6b:2b:db:c1:4c:83:55:a5:d8:ef:d5:
de:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45499
sbgp-ipAddrBlock: critical
IPv4:
103.5.60.0/22
110.5.64.0/21
111.235.80.0/20
116.206.224.0/22
203.118.244.0/22
IPv6:
2401:bc00::/32
Signature Algorithm: sha256WithRSAEncryption
75:e4:eb:c0:d2:e2:4b:57:39:ba:d4:e2:6c:35:dc:57:6d:a8:
f7:04:0d:60:68:b8:8e:b9:de:5a:cd:7b:45:3e:43:06:ce:f3:
1a:1e:f9:11:95:e6:b6:a0:96:68:16:77:41:cd:67:e0:4c:50:
b1:6d:3a:25:be:7f:fa:62:9c:ea:36:71:b2:75:bb:27:b5:08:
47:8f:f9:39:ba:59:0d:5b:d1:e9:b6:44:62:29:34:41:6c:80:
a9:54:91:ab:88:05:dd:8a:d2:c8:23:3d:15:41:9c:b9:0a:59:
6c:5c:54:48:01:9e:fb:a9:0c:a3:d1:22:99:a8:fc:f1:00:4b:
72:c9:5f:3c:f2:ca:d8:2d:ba:cf:f3:9d:57:61:1d:e5:30:f7:
3d:b5:6f:45:08:5b:e2:fd:e1:e8:ec:e1:28:c9:bb:f1:f3:e7:
48:ba:16:5a:4e:45:d5:bf:1c:d1:8b:09:7c:43:88:54:be:bf:
e1:3a:62:6b:92:c9:c4:34:db:20:ea:de:b5:69:e3:2c:99:8e:
1a:1d:13:ac:cd:cb:96:a5:26:e6:1e:df:90:07:4d:e5:cf:a9:
96:57:bf:1b:4d:41:52:dc:23:6b:4f:87:9f:94:0f:97:03:4a:
33:3d:b5:e0:c3:67:60:c5:37:58:b1:d2:ee:14:55:18:10:a1:
5e:5c:1c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:30 2025 by rpki-client