Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer
File: gunGO3wseQh9WrEOid0oovfEnD4.cer (raw, json)
Hash identifier: S5bdC+pkix3U4YjRLTbL2gUequK0BqeQs/4dUKtaeYM=
Subject key identifier: 82:E9:C6:3B:7C:2C:79:08:7D:5A:B1:0E:89:DD:28:A2:F7:C4:9C:3E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024124
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 27 Apr 2025 13:51:32 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 152684
IP: 103.129.14.0/23
IP: 2001:df3:a9c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Jun 2025 07:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147748 (0x24124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 27 13:51:32 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A915308F, serialNumber=82E9C63B7C2C79087D5AB10E89DD28A2F7C49C3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c0:5c:ac:ad:4e:64:c1:36:a4:0a:93:8f:57:
6f:4d:a6:73:b7:d2:45:ef:06:4e:6f:78:48:58:a9:
11:9c:46:52:40:3e:85:45:09:d8:32:54:c6:30:89:
b1:a8:73:cb:0e:1a:7f:df:6b:0e:cf:57:fe:10:ee:
d9:96:ac:3b:00:f7:1c:ef:86:99:15:3b:85:0b:6a:
a9:a6:46:9e:bd:90:77:20:e0:f6:00:27:64:9c:cb:
be:17:a6:e0:e7:bf:19:94:60:7f:35:13:e4:84:a7:
6b:7f:f8:13:c0:21:bc:d8:95:6f:e4:3a:9f:28:be:
96:f2:7f:3f:a8:d6:c5:96:cc:b7:07:12:da:2c:e1:
79:9b:e8:dc:f3:7d:24:15:35:13:94:fc:3a:dc:a0:
b9:44:af:b1:8e:3e:b7:1f:d8:fe:b7:b1:56:b0:bc:
7f:9b:79:9a:22:41:13:2a:ab:22:6f:c5:3d:6e:e7:
69:a6:65:fb:72:63:89:65:f5:aa:18:08:2c:78:1d:
07:ac:30:2f:95:66:62:e5:75:97:3b:bd:b6:a7:94:
fa:c7:da:1f:08:33:72:d7:53:12:fe:b9:41:0f:80:
6f:09:15:9d:93:5b:5d:89:51:48:da:94:49:39:4b:
89:b8:d8:30:3c:f9:ce:25:4a:e6:90:49:73:73:31:
9a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E9:C6:3B:7C:2C:79:08:7D:5A:B1:0E:89:DD:28:A2:F7:C4:9C:3E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152684
sbgp-ipAddrBlock: critical
IPv4:
103.129.14.0/23
IPv6:
2001:df3:a9c0::/48
Signature Algorithm: sha256WithRSAEncryption
6b:8f:d4:fd:74:9f:a6:8b:50:83:07:0d:6b:95:03:7a:c1:7e:
54:65:12:63:cf:3f:08:77:71:28:e8:04:a4:43:9f:a2:16:47:
4b:a0:b3:d2:8a:d9:9c:98:81:4d:8b:3e:3f:ac:16:4a:11:2d:
26:ba:63:c5:50:72:2a:00:7f:d6:8b:80:fd:1d:06:59:22:c9:
73:16:36:be:40:a2:8c:d7:31:6d:87:dc:1b:bf:eb:97:9b:33:
17:2c:21:03:f8:56:d6:b8:21:c3:86:8b:47:e9:8f:49:5c:e9:
28:37:b3:5d:98:4d:28:a3:c2:43:1c:b5:54:71:1f:f8:70:3f:
cb:99:5c:19:6e:1e:98:5a:58:17:1f:75:05:ce:c8:a5:c5:6f:
be:4d:e5:7e:5e:2b:39:06:67:60:e6:d1:0d:dd:ed:68:a7:83:
f7:60:46:c0:91:97:fe:3a:2e:c6:77:d6:b9:bb:7d:08:51:f3:
f8:a5:fe:3e:72:39:e0:c3:2e:29:41:bd:4f:9e:b0:16:99:64:
66:6d:d8:75:5c:23:fe:a0:6b:a0:7e:ef:26:e1:c2:b0:2c:9d:
de:7a:64:fa:8e:61:7e:42:9d:ee:65:72:57:ad:1d:b5:60:c2:
f4:b2:67:e8:3c:4f:70:85:65:7b:e0:22:d2:36:37:af:7d:ba:
91:83:0b:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 30 09:42:29 2025 by rpki-client