Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
File: QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer (raw, json)
Hash identifier: GNh0yv0QgPGrZ/Fc9RscSRv5KyJpqRcPvnWLew6+upw=
Subject key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021AA3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 11 Nov 2024 03:44:04 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 151813
IP: 103.131.134.0/23
IP: 2001:df2:f440::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137891 (0x21aa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 11 03:44:04 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91A35A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:98:2d:ab:5b:9e:23:99:c3:de:bf:ab:43:
6c:58:c0:81:f7:b2:b8:df:e7:85:02:af:cf:9c:a0:
94:7d:dd:89:0f:40:e7:47:9e:fc:6f:98:b1:86:68:
d0:7d:3f:af:69:b4:d7:b4:9f:26:cc:ac:92:1d:fb:
42:66:52:0b:d4:51:5d:e1:cd:ea:25:d5:bf:80:2a:
c1:37:4c:7e:23:6c:fc:a9:ad:b6:6a:ab:ba:1f:5e:
c8:51:9d:77:2b:da:17:b2:3d:7c:3c:fe:6d:ab:cb:
a3:71:84:bc:60:3e:40:3a:54:dd:cf:f0:e0:57:79:
33:64:f7:ed:a3:14:eb:ca:62:32:97:48:18:2b:44:
99:cd:78:b5:d2:f3:1b:f5:34:b6:d7:e8:d2:19:62:
9f:2d:a6:45:27:04:cc:18:b9:06:25:1e:c8:3b:19:
bc:e3:5b:7f:32:63:1c:3a:b4:e5:ea:d6:52:73:b9:
14:d3:be:8a:4f:d0:42:88:f7:ca:65:e5:da:3f:46:
f0:b3:72:05:5a:de:4e:60:cc:cb:70:e9:1d:d1:23:
fe:04:67:72:44:00:f7:5d:f1:3e:eb:68:88:55:1e:
76:ec:55:fa:96:4a:af:86:18:f9:50:24:b1:37:60:
2a:d1:f4:a5:e4:8d:ec:70:ff:51:1a:db:27:5b:81:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151813
sbgp-ipAddrBlock: critical
IPv4:
103.131.134.0/23
IPv6:
2001:df2:f440::/48
Signature Algorithm: sha256WithRSAEncryption
8b:b4:f1:f2:81:26:69:5c:78:9a:29:51:89:7d:ed:bd:d4:cb:
b7:cc:7c:cd:e1:ba:2c:9c:a1:a7:67:09:ae:7d:7d:6e:59:af:
56:3f:4a:bd:7b:5c:8d:13:f4:b0:75:1d:56:44:7f:8b:0b:ef:
36:12:aa:1b:36:49:79:a9:69:65:1b:6a:01:3c:17:ed:54:b5:
2a:01:71:cf:da:cd:47:e4:d9:41:7c:8c:44:8c:c1:2c:ab:1f:
9c:cf:ad:fe:30:c1:30:26:e2:fa:57:27:5c:12:2b:c4:83:1a:
eb:d4:8f:da:7e:3f:b4:b6:cb:4e:81:15:1f:3e:3d:85:86:7f:
20:bb:28:06:c7:c2:54:84:cc:25:9b:dc:3b:94:01:3b:99:ef:
9f:63:5f:5f:06:21:25:ca:25:6c:cb:65:15:e9:e3:a1:cd:c8:
6e:79:eb:42:13:bb:f5:23:a3:30:02:bc:07:d4:8e:71:96:a1:
55:10:ec:5d:56:2a:e1:d3:98:ba:a0:d5:1b:a9:5c:d3:4e:d3:
26:0b:3a:f2:1f:60:e9:6a:a3:9e:2b:23:8d:3c:21:da:55:34:
75:a0:c0:a4:26:e0:2a:b1:d7:53:ab:10:4b:d8:6c:21:16:d9:
bf:33:9d:10:b9:ff:16:a9:1b:49:2c:2f:74:f8:ee:52:67:9c:
fa:8e:9e:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:15 2025 by rpki-client