Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer
File: CekFd0f2O6Ciga54ATZozt6kCrQ.cer (raw, json)
Hash identifier: AJz6TcMZpZ6Fu8CpFSoe5BCuNEIrcMJm9KZu+r33+fU=
Subject key identifier: 09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0247AB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 21 May 2025 02:59:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 141730
IP: 103.148.106.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Jun 2025 07:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149419 (0x247ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 21 02:59:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91CDAFB, serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:0a:3f:64:a9:e7:40:de:d7:44:e2:e7:aa:
36:13:02:b6:83:07:ca:66:00:69:e5:4b:9c:5b:73:
27:6c:5e:30:de:5e:e5:6b:3a:11:6f:4a:55:d9:0e:
b9:f4:9a:24:7d:2c:9c:fa:a0:0b:ee:21:d8:83:bd:
76:51:f2:da:bb:45:5d:5f:9c:12:5c:d4:41:18:59:
09:43:e2:28:0a:b0:7b:84:8d:77:d5:dd:33:0b:af:
eb:1d:53:5b:39:69:ae:0f:22:d6:cf:7d:79:a7:40:
38:a2:79:6e:ec:a8:5a:4f:42:57:af:2c:86:fa:66:
39:ab:08:30:b3:57:47:85:ac:05:57:9a:ed:72:29:
6d:0e:fb:a4:ad:34:96:0c:cb:d8:e5:d6:dd:cd:0c:
cf:cd:28:5f:1e:74:67:b4:d2:cc:3b:81:e4:f0:0d:
43:db:d1:95:e1:f1:9b:f5:1e:e5:75:20:7e:af:7d:
1f:8e:fd:4b:ed:50:c2:55:e3:ff:e3:14:35:23:56:
19:5a:9e:8e:09:7b:e8:c6:58:90:7a:20:1e:75:e5:
e4:ef:60:2f:4e:7e:fa:e2:2d:7c:82:c1:32:67:0e:
09:13:37:d2:cc:22:df:82:79:90:52:c3:9d:c9:0e:
0a:54:4c:5e:68:16:55:0b:e1:30:d3:d5:6e:31:5c:
87:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141730
sbgp-ipAddrBlock: critical
IPv4:
103.148.106.0/23
Signature Algorithm: sha256WithRSAEncryption
d4:37:2c:ed:a4:55:c5:12:1f:93:d5:6f:c0:fc:0d:c5:5c:af:
53:c5:70:5b:66:67:ff:49:77:ac:65:26:c5:33:73:63:41:68:
11:fc:6f:3a:88:80:00:4b:eb:4d:91:b2:12:d0:8e:8e:a4:0e:
23:aa:d5:97:50:24:d0:ee:98:03:9c:08:d4:78:01:38:28:9e:
1d:a8:af:bc:e2:01:99:5d:aa:ee:0f:63:72:6a:16:49:22:40:
74:98:cd:29:59:60:62:7d:f9:cd:4d:a3:ee:b6:67:58:07:7e:
14:f4:42:0d:a2:dc:f2:fa:03:be:5e:b6:37:1f:83:71:68:c0:
0a:b9:0d:cc:52:09:1d:41:8e:85:b9:96:37:69:b2:84:ae:94:
ae:97:b9:00:4c:7b:d5:84:c9:ae:4e:f2:e8:27:f1:39:9c:0b:
02:5f:04:3a:77:5e:87:9e:2f:b0:19:64:b0:53:18:0f:64:c9:
36:f9:2f:be:fe:2f:92:20:3f:85:b5:85:cc:57:39:ff:71:1d:
e9:ad:4e:6a:f1:42:17:32:28:1e:15:44:de:32:b5:3a:f4:a1:
32:b3:cd:35:b8:d5:13:9f:d9:7f:ef:75:88:81:81:a6:8d:b0:
f3:e7:d9:45:fa:4c:03:2f:87:26:4c:0f:93:d8:ab:bc:f1:65:
f6:52:42:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 30 09:27:01 2025 by rpki-client