Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
File: TuVApIrZc_vYMavQJgO1-w-5Rb4.cer (raw, json)
Hash identifier: m8Gg1tKvoge//iOjS68fuZAY6sbQoE1u2cZS3tm5m5M=
Subject key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02309E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 12 Feb 2025 13:50:26 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 17911
AS: 59254
AS: 150353
IP: 103.224.12.0/22
IP: 122.129.64.0/19
IP: 203.128.0.0/19
IP: 2400:4f00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143518 (0x2309e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 12 13:50:26 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A9139B49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cb:c5:28:4f:73:80:65:bf:4f:78:9f:b8:ff:
2e:d3:42:4e:04:b3:72:8e:32:e8:c2:9b:9c:dd:e4:
c9:3d:2f:ec:6a:dd:9a:25:3f:1a:d7:d2:59:56:b6:
ce:f1:85:c8:09:1c:9d:c9:70:6c:91:89:44:80:98:
2c:35:71:4c:6c:20:ad:7f:e0:58:61:23:49:14:38:
c8:bc:4c:0d:ba:f0:0d:a2:b5:4d:cd:bd:e6:23:1a:
23:4b:57:fa:a9:c7:3a:e3:b0:55:c0:74:8f:66:f0:
81:ad:56:da:3a:8b:d1:b8:2a:1b:d2:ba:29:61:ef:
6d:8b:ce:9d:a1:41:eb:e8:de:99:8b:93:e5:83:2b:
55:a5:f6:e1:4a:6b:9a:0a:37:e7:43:6b:51:b1:4c:
fa:ff:86:e8:3c:2b:e1:aa:49:85:16:6d:fa:ef:cd:
2b:3d:a1:d2:d0:e9:51:2d:38:7f:7c:35:49:e3:66:
21:45:db:11:00:8a:d7:7a:36:e0:52:2a:28:3d:fd:
67:86:b7:3f:4f:3f:dd:d2:5a:9c:63:cd:4d:fd:ae:
7d:d2:5f:00:f0:5a:26:60:82:88:08:6f:ce:3a:10:
57:b7:08:cb:72:0a:ef:d0:f5:31:12:98:ca:0a:09:
ac:83:65:83:bb:7a:dd:bc:9d:db:be:1d:9d:45:e5:
8b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17911
59254
150353
sbgp-ipAddrBlock: critical
IPv4:
103.224.12.0/22
122.129.64.0/19
203.128.0.0/19
IPv6:
2400:4f00::/32
Signature Algorithm: sha256WithRSAEncryption
8c:00:fe:68:22:e6:04:b8:81:94:d1:21:30:84:a9:b2:fc:fd:
16:95:43:d8:11:f8:82:d0:4f:4d:70:09:3a:8c:27:8f:91:24:
96:60:63:7c:f1:4a:94:87:17:8c:17:21:be:a7:50:2a:f7:98:
72:31:06:10:5d:f4:00:6f:a7:d4:80:46:43:f3:1a:ee:a1:ff:
22:d9:81:6d:5c:e9:a4:0d:c1:26:b5:f2:7b:62:56:2c:43:75:
dc:ee:db:cb:f5:c8:e7:9a:5c:46:ca:15:81:10:f4:51:ab:97:
9c:bf:77:f2:19:7e:83:70:7b:77:43:ae:23:24:ec:31:01:df:
ee:20:74:42:cc:80:6e:56:3e:30:70:e9:a9:ca:8f:d2:09:cd:
c2:6a:b7:7d:bd:0e:42:2b:82:7c:bf:ca:53:e3:20:e4:06:cf:
2f:49:59:a8:bf:a7:d6:0d:05:a3:35:b4:96:9d:60:6a:9c:97:
02:9f:7c:2f:af:65:e6:95:3f:6a:60:bd:f2:58:55:d3:f1:01:
4f:1a:9c:23:2f:36:fa:bb:d2:ae:36:e2:03:d0:d2:c8:67:38:
6f:d8:a4:9d:41:ad:87:19:58:8c:9f:00:ff:f3:04:50:d8:89:
b6:5c:61:79:20:f1:81:ec:aa:2c:ec:3f:db:89:e2:52:ae:f4:
2d:cb:4a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:15 2025 by rpki-client