Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
File: DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer (raw, json)
Hash identifier: 2aSt3zrbe+3xeW64/qrfY40BoPFSHjAYR+vzoSkiBDc=
Subject key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0228A1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 10 Jan 2025 17:15:53 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 38534
IP: 202.12.93.0/24
IP: 203.1.104.0/22
IP: 203.16.32.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141473 (0x228a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 10 17:15:53 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91AA96A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2b:51:9b:39:74:53:38:e4:14:40:fc:90:af:
6f:0b:ce:a7:c1:f6:07:74:da:c2:8b:cd:92:5f:fd:
a3:ea:e4:a7:2b:7d:e2:ca:73:fa:b2:36:86:21:d6:
94:91:85:a6:c7:9a:2c:8e:cc:75:5c:c8:4b:69:52:
89:1d:b5:35:0e:da:d0:5a:cb:b2:df:41:65:4c:35:
65:1e:4d:a4:bf:89:16:0e:f4:fe:a2:9c:30:4f:5a:
60:0c:62:26:9e:bb:c4:9f:73:51:9c:62:7d:5f:00:
e7:f1:1d:c2:73:50:ab:b6:0a:a3:ca:a5:0d:f8:f5:
cc:25:c2:94:6f:b9:f6:bc:95:a8:1b:60:f5:31:80:
45:25:fe:8e:8b:33:1d:39:a0:ff:20:b3:4a:1c:3f:
de:07:e0:bc:83:13:d0:75:92:7e:fc:b0:03:13:8d:
e9:97:b2:98:fe:c9:51:37:4c:b2:45:56:b9:11:b0:
da:f7:3c:48:06:b5:28:45:08:1d:ca:52:14:06:40:
85:22:51:30:7f:8c:db:06:54:5d:86:6d:8c:91:3b:
5b:11:b7:5a:44:01:27:89:8a:92:cf:b5:26:3b:ff:
f9:18:03:1a:64:91:41:71:11:54:8b:96:13:cd:0d:
e9:b8:76:10:12:87:03:87:e4:88:90:39:db:40:28:
f0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38534
sbgp-ipAddrBlock: critical
IPv4:
202.12.93.0/24
203.1.104.0/22
203.16.32.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:a1:bd:50:e1:b2:27:7a:8e:3f:a3:e2:c9:80:db:14:41:fc:
14:f6:50:46:4b:31:21:a1:6c:c9:86:d4:93:a2:66:a8:0b:8d:
c1:33:c0:69:30:18:c3:6e:35:a2:57:54:87:51:72:f1:d7:9c:
66:3b:c6:cb:a7:75:72:5c:aa:e9:ee:1d:e7:7e:39:18:06:e1:
73:29:42:dd:5a:d8:dc:76:34:20:ea:3e:c1:7c:ae:b9:4b:84:
cf:b8:40:2b:bc:20:1b:c6:dc:a5:fc:7d:00:12:e4:b7:f7:0a:
f1:78:96:08:42:39:c3:d1:fe:57:e8:b3:45:81:3e:e3:a1:e1:
55:22:23:34:e6:b8:51:98:20:5c:63:6d:d1:af:7b:cc:ec:6b:
bf:da:94:59:54:d1:3d:b5:f3:fa:59:26:f9:f3:4f:85:dc:1e:
31:cc:96:9d:37:9c:99:26:7c:65:64:98:24:96:03:21:2f:59:
92:72:46:de:5d:f0:e3:86:84:72:5b:f2:45:79:5f:00:10:f1:
09:df:72:77:12:69:b5:4a:bc:31:4a:99:1d:af:e5:56:18:ce:
32:5a:90:e4:e1:87:d2:95:68:22:5e:e3:37:5c:32:ab:81:00:
0d:2a:c5:39:b0:54:c2:1c:36:f3:9c:a3:ff:d7:03:10:37:dd:
4b:34:92:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:45 2025 by rpki-client