Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer
File: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer (raw, json)
Hash identifier: ELFrK+qYIIv9l+Prw8TVHL2ZLVfvbXYtYX0k03E0hWs=
Subject key identifier: 56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0220CD
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 05 Dec 2024 14:02:43 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 55885
IP: 49.156.48.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139469 (0x220cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 5 14:02:43 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A9136BD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:a7:64:d2:f7:01:30:41:ad:e7:5e:bb:36:
d5:f5:2d:17:ea:71:6d:73:eb:99:38:ca:16:e5:8a:
fc:12:80:e5:36:87:a1:2c:44:ca:d3:4d:cc:50:0e:
88:c4:0e:cc:3e:45:a2:0f:d0:7b:9e:ab:5b:2b:c7:
a3:dd:07:1c:a6:9d:8f:8f:d8:d8:e1:fa:1f:2f:c7:
2c:89:bf:0a:04:27:3d:b4:c3:a2:8a:e1:ff:66:6b:
14:31:0c:52:db:a9:8e:88:5d:ff:66:f8:6e:9c:63:
6a:69:d4:5d:57:4b:78:58:c6:49:8c:c0:07:40:2b:
c7:8c:7d:f0:d4:5a:fe:6f:43:a6:57:8a:33:32:a7:
d2:2a:8b:dd:d4:e6:cc:57:5d:0c:14:c0:07:87:cb:
4d:e2:20:f8:c0:24:66:d7:7b:98:01:f1:d1:1e:d9:
0b:e0:d1:c2:59:27:26:ae:59:51:f8:78:a3:dd:1e:
77:85:eb:8f:f2:68:33:9f:5d:c7:db:06:88:58:ec:
80:d0:2b:bf:0a:07:1a:7e:49:4f:63:e5:62:45:33:
64:c8:27:c4:26:6a:9f:db:3e:a0:53:0c:c1:98:dc:
1b:e9:93:51:bf:0b:c7:32:5f:0b:c4:97:dd:f0:9b:
5e:e2:67:bb:2f:43:51:bf:68:c9:a8:d2:75:3a:26:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55885
sbgp-ipAddrBlock: critical
IPv4:
49.156.48.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:70:c0:30:e7:9b:a5:d0:e7:d3:fe:96:3c:c8:3f:41:77:7d:
b2:78:b7:dc:dd:de:87:88:39:2e:fe:63:12:09:e0:4a:89:64:
bb:65:12:c7:dc:d0:38:ae:38:f7:98:37:8e:67:c4:7e:54:d7:
a3:bb:19:63:24:5c:f2:53:21:c1:af:72:e8:6c:25:6b:53:55:
3d:94:fd:7b:70:2f:6e:e5:51:59:30:7e:c9:74:30:4c:47:7c:
1e:6e:94:f2:30:c8:1c:bb:0e:af:82:88:92:25:47:29:b4:19:
54:23:ce:15:be:a5:98:5d:3f:25:c4:15:7d:0b:00:d2:ad:94:
e9:f8:a7:67:1a:05:43:0b:9e:d5:29:4d:dd:f8:59:48:ab:b4:
50:0f:a8:09:ae:ca:d6:0b:ab:97:70:43:57:54:48:0b:ec:5c:
23:24:32:44:e9:74:c6:41:3b:fb:32:47:cd:ab:8c:8c:94:2e:
47:6f:a4:d2:2d:99:5b:d7:d4:82:1a:ce:5b:6d:95:a4:ce:fb:
88:b5:ba:ae:79:29:0e:a4:da:6a:8f:ff:7c:f6:b5:c1:42:b6:
a8:76:e8:cc:8c:4a:07:dd:d0:37:d1:ba:b8:a1:77:77:0a:1a:
b9:ab:d2:c8:3c:c4:f7:cc:df:fd:37:6a:43:72:13:09:c5:3a:
80:8c:f7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:09 2025 by rpki-client