Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
File: Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer (raw, json)
Hash identifier: X2mWYAsxj0LqJbQ+zDQ/Z5AvGAG17toLUqc2URQ7yyE=
Subject key identifier: 52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021BC8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 16 Nov 2024 17:36:28 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 139834
IP: 103.145.232.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138184 (0x21bc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 16 17:36:28 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91F9C95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ea:ba:02:33:47:f2:69:b4:5c:5c:2e:46:1d:
ee:58:d1:4a:26:12:72:42:10:a1:77:89:b5:c8:3d:
c8:f5:60:31:13:1c:96:51:8e:dc:eb:2b:94:62:56:
17:a6:d7:cb:a9:fd:44:3d:1c:df:d3:15:10:09:e1:
9d:00:78:3d:7c:a7:15:8c:03:e5:16:4a:0b:68:26:
3e:79:c0:65:6b:8e:f6:0d:f3:b8:49:db:5b:c7:0f:
6d:96:fb:41:49:fd:2a:d5:85:ea:f9:2d:69:26:8d:
11:68:20:d1:53:5b:bf:92:83:c1:a0:2d:7f:52:f4:
fd:d1:ec:de:d9:d8:ea:a7:88:f6:d6:09:fe:69:5a:
f7:1d:8e:02:a6:06:1e:28:e1:9c:ed:a5:46:83:23:
17:47:9e:50:d4:25:26:05:ab:54:06:5c:bc:1a:0a:
a7:90:c6:3b:ba:eb:ad:da:96:ba:8f:36:67:44:8e:
9c:2e:eb:fc:d1:fa:26:44:a0:e0:a9:de:16:3e:8e:
37:04:36:87:4f:f6:af:27:6e:de:f7:61:9d:9f:e4:
41:67:f5:17:d1:f5:9c:c1:66:25:76:2f:d2:ce:49:
98:df:c0:29:f1:d3:0b:c6:84:3d:b9:2f:d8:a9:5c:
7f:f5:ed:ee:47:97:31:82:de:6b:51:69:a4:8f:95:
13:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139834
sbgp-ipAddrBlock: critical
IPv4:
103.145.232.0/23
Signature Algorithm: sha256WithRSAEncryption
86:71:df:1e:64:57:98:72:50:0e:32:ec:63:84:a2:60:10:ed:
1b:aa:d5:1a:0d:9a:de:58:c7:db:77:c1:22:47:87:18:3f:dc:
f5:fd:21:a6:ea:2a:34:d5:01:ab:af:9b:ca:ce:7d:37:b7:0b:
54:6a:2b:a6:0b:74:5d:e3:c7:5f:44:2d:8f:cc:b8:ba:e8:de:
f9:f4:c7:0c:73:09:c7:26:a4:4f:77:91:0b:8e:31:bc:4e:b8:
bf:e5:c2:29:70:f3:a5:bf:51:f4:25:f7:3b:bb:ab:b3:4e:b8:
c5:3f:8b:e8:a9:25:b5:ce:8f:2c:5a:79:02:0f:03:00:1b:21:
ad:48:13:db:f7:55:f7:a2:ea:09:2a:66:b7:0e:7b:46:54:13:
b5:2a:0c:97:5f:78:f5:a0:03:9c:5f:73:23:68:2c:7c:d3:b0:
e4:fb:e6:7d:b5:48:13:a9:af:d8:d9:7e:b4:67:b8:3a:e6:18:
08:50:55:51:59:3d:45:76:23:58:20:42:40:cf:9a:21:96:e3:
f6:35:d0:bf:ab:79:3d:b8:d9:73:39:15:47:07:f0:fe:72:07:
a4:65:9f:42:65:33:ac:d3:20:ba:e3:a2:00:5a:71:a1:4f:b5:
25:17:56:1e:bf:09:d0:91:6c:7c:3a:a8:38:85:e7:8e:82:8a:
d0:02:50:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:30 2025 by rpki-client