Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer
File: F_M9uCahQtM3xeuZhL4txPm8ZCk.cer (raw, json)
Hash identifier: 8iOCgPKbCKqr2YEJwptEPOjdu6GqrRqr2hfB/DsPcng=
Subject key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023007
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 09 Feb 2025 16:34:02 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 132125
AS: 150795
IP: 103.247.72.0/22
IP: 2402:f300::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143367 (0x23007)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 9 16:34:02 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91BFA29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a3:2e:66:db:ca:1a:ae:df:46:34:a8:2a:c3:
91:37:a1:08:38:30:d1:90:81:97:ff:8d:da:d5:a2:
d7:4a:1d:71:e8:b1:e9:2a:aa:20:2d:05:91:cc:0c:
ab:8c:bd:19:4f:a7:3c:0b:a1:75:0e:ca:6e:ee:d4:
73:87:76:6f:85:89:7b:26:5c:6e:11:70:ef:de:dc:
eb:15:b4:8c:89:e4:ec:4b:82:c8:5b:30:1a:a9:9e:
30:9b:8c:a4:15:66:a6:39:4f:ca:c9:ab:20:20:78:
43:ea:96:71:1e:83:b9:04:f3:23:f1:ec:b7:3b:7f:
9e:73:45:86:0e:1d:1f:f5:48:06:7a:02:64:aa:05:
7c:8c:b9:d4:7c:6b:04:68:f8:3a:84:0e:d6:04:2e:
23:06:e2:c0:0c:a3:18:ef:ad:e4:ea:14:f5:cc:34:
cd:46:8f:99:7c:18:53:c3:3f:dd:95:f6:c9:99:4d:
df:7c:73:42:84:06:1b:78:db:7c:9f:f5:29:85:13:
c0:8f:5a:f9:83:c2:16:ce:52:6f:57:6a:9d:bb:c8:
e7:56:b6:f7:36:09:60:de:7f:9e:6d:18:05:92:99:
9b:c0:75:10:b0:89:b5:c8:25:b9:24:a5:96:b9:a1:
5d:5d:d1:dd:9a:0b:b7:d9:59:a4:4d:f7:ea:05:6f:
0b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132125
150795
sbgp-ipAddrBlock: critical
IPv4:
103.247.72.0/22
IPv6:
2402:f300::/32
Signature Algorithm: sha256WithRSAEncryption
19:75:c4:74:84:80:56:dd:a8:da:a2:81:42:49:75:96:d8:54:
7b:db:13:ce:82:b2:ab:4c:01:61:ac:d5:60:d1:cc:cd:8d:37:
27:d1:5b:ff:53:3d:c1:72:e2:f7:7a:e3:7d:27:d9:65:b6:89:
f3:cc:98:5e:0f:37:1b:b4:14:67:89:ad:d0:1c:9e:35:c0:63:
53:33:5e:9b:a8:80:6d:88:89:5a:4b:1d:9b:dd:e7:3b:4d:51:
59:dc:3e:5d:79:5b:55:9a:b7:00:f8:77:2d:3c:2d:19:61:74:
17:97:6e:35:c5:31:31:e0:b3:fe:9f:94:ce:3e:69:46:dd:74:
30:16:3a:4c:4a:68:4b:96:15:af:2b:ac:a3:80:f5:96:d9:7d:
55:f5:7b:de:b4:99:0c:62:29:ee:51:ff:c8:46:16:50:bf:c5:
65:5a:5f:03:be:06:ca:16:49:ce:c6:dc:e8:cd:49:48:33:a9:
da:12:08:66:ee:08:78:8f:95:a1:d9:b3:95:a8:d0:7b:1a:00:
df:f6:b5:bd:45:0a:94:b8:72:26:81:30:47:ae:7e:13:c7:f4:
4c:3b:ff:b7:77:5b:d3:7f:0e:e4:8f:c3:14:6a:1f:31:bd:a7:
e1:7b:15:06:aa:2f:68:1b:e3:d7:70:15:83:2a:19:e2:4d:8f:
06:90:89:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:01 2025 by rpki-client