Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer
File: T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer (raw, json)
Hash identifier: GIyKvAZVwvSHzm9oJ3Lo6aRgaylEVUwQOfwD4lqJM6g=
Subject key identifier: 4F:A3:68:A6:2E:D2:5C:62:78:E2:3B:1B:FF:A2:51:A1:49:AA:2F:58
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022B74
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 25 Jan 2025 13:56:38 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 150737
IP: 103.77.116.0/23
IP: 2001:df4:d3c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142196 (0x22b74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 25 13:56:38 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A916548C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:a8:97:39:5c:a0:26:a7:39:1b:84:c2:8d:
4f:2f:36:8d:ba:cc:fa:6a:64:6b:b3:10:6d:50:77:
b2:27:d9:75:64:f6:f8:32:a3:4f:e3:bf:26:68:a2:
13:be:66:d5:2e:26:8f:8e:f7:81:90:48:14:5c:d0:
4c:c5:b7:12:76:ce:10:1b:29:13:12:ec:a4:76:86:
fb:77:c3:16:45:b2:b7:1b:88:95:c0:24:e7:2e:e8:
eb:20:7e:54:f9:a0:92:eb:2d:68:66:bb:80:81:67:
49:80:cc:9c:13:32:ad:cf:54:81:e7:d8:df:c4:3e:
52:6a:6c:6a:5e:ee:3b:f7:29:67:67:94:00:bb:c1:
88:06:93:31:73:56:49:12:01:1d:e6:71:c2:e6:66:
74:1e:52:10:1b:29:f2:2a:f6:71:ee:db:c6:33:fe:
4e:33:aa:b4:8d:18:27:26:f9:05:2b:3f:95:ee:30:
4a:60:a4:ba:d7:68:ef:da:c3:9a:03:c6:2f:2f:d9:
6b:ff:a9:0e:21:30:08:63:4b:e3:68:9c:0d:d0:c8:
d3:47:4e:ba:48:e4:50:d9:37:2d:fa:ff:5e:63:88:
28:9d:74:30:86:4f:2c:eb:ac:ea:f9:d8:df:06:ae:
19:dd:09:61:cd:3a:af:60:64:38:ac:2d:a5:f6:93:
db:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A3:68:A6:2E:D2:5C:62:78:E2:3B:1B:FF:A2:51:A1:49:AA:2F:58
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150737
sbgp-ipAddrBlock: critical
IPv4:
103.77.116.0/23
IPv6:
2001:df4:d3c0::/48
Signature Algorithm: sha256WithRSAEncryption
82:41:fc:c4:ef:6b:a3:10:ea:83:79:32:d7:b9:d5:f2:58:1e:
bd:62:9f:1e:34:da:23:d6:5a:e9:ff:04:0e:df:38:99:29:56:
2c:23:b3:f4:6d:ff:ba:c9:ec:06:70:d3:d8:e1:9d:68:98:70:
fa:0e:f7:b0:4f:17:b8:67:e7:b1:5b:6f:81:d9:78:12:df:a8:
cb:6e:b4:7a:54:0c:3c:bd:d2:bd:9b:81:0e:c3:5b:ed:a1:43:
4a:71:a9:d2:53:60:25:81:df:26:6c:5c:89:bc:58:ed:7d:11:
16:a1:ab:43:0e:10:0a:bd:f2:02:7b:b6:0e:c1:62:c7:60:b1:
af:93:a0:34:d4:e6:ce:47:25:cf:aa:6a:ff:1b:10:86:96:d7:
01:c3:bf:f8:1e:6f:66:6a:f1:0f:84:2e:32:b9:60:cb:6f:85:
df:99:33:7d:3f:53:7c:cf:b3:a5:7d:79:ea:a1:1a:46:aa:bd:
27:8c:bc:cc:52:8b:e2:7e:ae:04:76:74:3f:37:96:39:96:3a:
f1:45:bd:02:64:7d:53:33:76:00:49:73:6e:a4:e9:a1:14:70:
98:f6:7d:22:e3:1d:b0:34:c5:8d:e6:22:d4:ae:a4:c0:70:6e:
d1:a6:8c:fe:41:53:35:b5:b8:8d:08:f2:eb:2b:29:24:e8:9d:
b2:fc:4a:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:44 2025 by rpki-client