Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
File: U3TG518YYFJFWi2NpSkv7wCcya8.cer (raw, json)
Hash identifier: N83W85B37q9o+QtrPOQaKWJ75/VqFvvdpIkOK0rmaGg=
Subject key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0229FB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 17 Jan 2025 17:33:37 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 63916
AS: 132068
AS: 134520
IP: 27.122.56.0/22
IP: 43.239.156.0/22
IP: 43.245.196.0/22
IP: 43.251.156.0/22
IP: 103.1.152.0/22
IP: 103.10.196.0/24
IP: 103.10.198.0/24
IP: 103.35.72.0/22
IP: 103.68.223.0/24
IP: 103.71.254.0/24
IP: 103.72.4.0/23
IP: 182.161.32.0/22
IP: 202.144.192.0/22
IP: 2402:c480::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141819 (0x229fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 17 17:33:37 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A91B885C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:98:f1:ac:b3:ec:cc:85:27:bf:41:44:a3:
12:ec:50:ff:b8:9c:56:e5:d3:7c:45:ad:2c:4b:3b:
1e:e9:07:f3:4f:4e:23:a4:d7:35:ba:2a:57:7c:2d:
d2:2c:b0:b3:af:a6:ee:c1:f1:25:6d:be:f0:38:99:
5e:40:5a:3e:97:1c:66:25:e3:f5:d6:87:8d:7e:82:
b7:33:18:1f:5b:d4:2f:c2:95:b1:86:89:12:a8:af:
9d:e1:38:cd:8d:b1:7f:fe:0a:bd:76:91:11:97:22:
54:bb:07:1f:7b:e9:f4:60:62:a4:2b:d7:b4:49:bd:
05:33:6e:41:05:c5:28:02:f4:05:c3:96:e0:5c:fe:
08:46:34:b1:c1:50:8f:b0:47:fe:29:c7:84:25:d0:
90:7e:d4:00:b9:7a:31:73:14:76:f2:3c:10:e3:c3:
0c:17:c1:6b:8a:05:e2:a6:cb:b8:92:c2:6a:ad:5c:
bb:36:68:59:2f:43:19:a0:18:d3:aa:86:d5:ff:ab:
28:3a:a9:49:3b:f9:a4:3e:0d:16:b2:4e:ae:57:46:
fa:c9:2d:76:ac:8e:ca:b9:59:a9:d1:1f:7d:a4:12:
61:50:2e:62:64:5f:a8:97:07:1e:28:4e:1a:da:6c:
a1:4c:c3:fa:33:18:85:83:25:55:33:17:b6:01:94:
0c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63916
132068
134520
sbgp-ipAddrBlock: critical
IPv4:
27.122.56.0/22
43.239.156.0/22
43.245.196.0/22
43.251.156.0/22
103.1.152.0/22
103.10.196.0/24
103.10.198.0/24
103.35.72.0/22
103.68.223.0/24
103.71.254.0/24
103.72.4.0/23
182.161.32.0/22
202.144.192.0/22
IPv6:
2402:c480::/32
Signature Algorithm: sha256WithRSAEncryption
8f:7c:5f:b9:08:79:fc:1a:8e:47:77:9e:fe:63:b5:8c:ee:86:
d8:0c:f8:a3:0d:df:e3:cc:69:09:74:1e:68:fb:99:5b:88:d9:
2e:af:97:a1:89:cb:05:1a:f1:06:be:90:2f:4c:7d:4a:58:8a:
c2:f2:e1:99:8f:c9:43:6d:a9:59:b9:b5:c0:0b:b1:f0:50:a2:
1a:5c:ae:ab:72:51:12:40:99:70:74:61:a1:15:7d:c4:a2:f9:
28:79:ab:b8:f3:0f:c6:3b:3f:d0:62:a0:ee:5c:7f:6d:22:55:
8c:5a:5c:fe:1c:68:40:33:11:a9:fc:5f:f9:a9:80:4f:3a:35:
dc:6e:ef:7e:33:f0:a2:84:87:5e:94:e8:b0:4d:aa:45:a5:fc:
7d:f4:ad:a2:98:3b:b3:a0:2f:53:08:4f:8f:5a:7f:8a:04:96:
75:39:b4:ab:95:ba:73:44:bb:62:1e:d2:43:8e:d4:f1:6a:59:
e8:23:2b:5b:46:f6:91:b3:dd:cc:fb:7c:82:62:3c:81:73:74:
b2:9e:31:72:b2:7f:d3:c1:7e:39:e9:86:7d:2f:8e:52:5e:79:
52:64:77:43:a9:b8:59:64:4a:42:3f:e1:dd:da:48:cb:04:b1:
89:ae:92:29:15:c3:c1:95:43:e2:20:8c:35:cc:bc:fc:81:72:
a5:ef:2a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:08 2025 by rpki-client