Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFWTypaApeo4eDP9NEAjS56AINA.cer
File: jFWTypaApeo4eDP9NEAjS56AINA.cer (raw, json)
Hash identifier: VO9BTaVpGfM9econLxe9oeH2aIatio97p18glzOiwGg=
Subject key identifier: 8C:55:93:CA:96:80:A5:EA:38:78:33:FD:34:40:23:4B:9E:80:20:D0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024521
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 08 May 2025 22:36:11 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 140596
IP: 103.150.210.0/23
IP: 2406:7c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Jun 2025 07:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148769 (0x24521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 8 22:36:11 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91D78FD, serialNumber=8C5593CA9680A5EA387833FD3440234B9E8020D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0c:60:23:59:5c:7d:ef:c9:f5:89:6d:6f:74:
c8:56:bb:bd:77:86:0b:c5:58:94:e5:20:77:a1:92:
0b:94:b6:cb:ef:7d:a6:9a:cd:80:b0:98:28:7a:20:
eb:cb:d0:a1:bc:5b:50:de:d9:34:a0:6b:a5:12:1e:
46:c8:a6:e9:f2:67:a4:9a:58:64:23:f8:e2:07:7f:
36:ea:4a:41:c3:d9:2e:6a:09:fb:b4:32:d6:91:f1:
3b:78:e0:b1:5a:a3:51:c8:64:e5:54:d5:ed:31:27:
03:6d:30:64:ed:2c:43:e9:01:dd:1e:b7:4c:10:81:
ac:4e:e3:00:f6:49:57:55:5b:00:f0:ce:cb:74:2a:
a4:b9:e6:24:1c:42:b7:7e:e7:09:71:71:d1:7d:c8:
ba:be:3d:f4:02:77:82:2c:69:63:02:66:6b:e3:e8:
4e:a9:51:e8:3f:3c:9f:99:0d:4e:65:b2:dd:12:e2:
12:04:6e:db:36:b2:f6:b0:29:d6:ba:6a:74:1b:06:
b5:34:0d:19:55:5d:1b:2e:75:42:10:2f:bd:30:02:
29:e1:da:1a:39:08:60:47:11:e2:1e:74:fe:2d:40:
c2:90:97:4d:55:88:cd:f8:d9:87:aa:bc:64:f4:96:
0b:13:2d:97:32:04:b8:9d:4f:3c:4a:89:b8:09:6b:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:55:93:CA:96:80:A5:EA:38:78:33:FD:34:40:23:4B:9E:80:20:D0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140596
sbgp-ipAddrBlock: critical
IPv4:
103.150.210.0/23
IPv6:
2406:7c0::/32
Signature Algorithm: sha256WithRSAEncryption
97:ff:1d:74:42:38:d8:c2:44:ac:35:c0:07:ba:b6:cc:d1:24:
aa:c0:4b:f5:81:6d:6e:0f:28:c1:5f:bb:fd:2e:03:0d:5d:0a:
f5:96:a7:d0:82:08:17:33:d8:23:ba:bd:e9:b3:4c:ff:bb:10:
88:78:74:1e:88:cb:fd:87:70:ea:98:b3:af:d6:a2:66:39:24:
4b:dd:ac:8b:3b:fd:94:4b:03:60:62:53:ba:1a:15:38:c0:d6:
14:33:ec:6f:43:e8:80:75:3d:27:d5:dc:f5:fe:01:cc:81:af:
7c:44:39:37:d6:d6:82:70:6b:b1:a6:b8:ee:b2:10:ef:16:4c:
b7:2f:c5:de:f5:c5:8d:05:48:84:e5:1a:f1:27:9f:c8:59:74:
30:37:3e:53:c0:b1:67:1b:7a:cc:ae:9d:d7:fa:a8:37:e0:33:
0b:d0:ae:5c:65:c3:ac:c0:6d:53:3e:c7:87:d3:48:75:fc:0b:
f9:5d:8a:af:f4:b4:61:e8:e3:cb:97:36:cb:0c:9c:9e:8d:c6:
3c:26:68:3b:34:de:02:3f:ae:0a:bc:03:45:34:78:b3:14:97:
da:f4:4c:20:4f:50:19:a4:39:f9:43:03:a7:c7:bc:da:c8:04:
b4:22:4a:ec:7c:62:c6:75:2f:12:af:62:cd:2a:1f:e1:c8:5c:
e7:e0:c4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 30 08:21:05 2025 by rpki-client