Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
File: jQmbFr6Vddy0uwaFh5eZn1XmA18.cer (raw, json)
Hash identifier: aldOLAqWEtSu3xabFeuOgau3s+M7ur4eyD/dNm9X2pY=
Subject key identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02191F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 05 Nov 2024 13:58:26 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 63961
AS: 132106
IP: 103.28.120.0/22
IP: 163.47.36.0/22
IP: 203.96.188.0/22
IP: 2402:f500::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137503 (0x2191f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 5 13:58:26 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A912AEFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4f:6d:96:17:36:05:1a:c0:13:ab:3a:d2:bc:
41:30:a0:79:63:e0:51:b5:d6:bf:59:d2:c4:e2:fb:
6e:60:65:72:c8:4f:94:05:37:25:1d:d9:d0:24:bf:
99:25:a3:6e:59:14:ca:77:9e:7e:34:43:cc:70:9f:
53:c8:81:d1:c9:84:22:1f:48:70:f8:44:a1:70:4c:
c6:d9:f6:03:85:e0:62:b4:ae:b3:b9:a4:bc:31:ef:
78:08:17:2b:23:78:56:35:88:5f:69:8d:fa:e3:52:
56:aa:b4:6f:ad:19:d6:98:46:9e:f7:cc:b0:b0:6e:
1d:9f:ed:51:83:05:01:15:74:8b:87:ab:73:29:60:
41:93:0b:64:e2:a1:96:eb:1c:f3:31:a9:37:23:74:
a5:e1:c3:88:2d:48:79:b6:10:fd:8b:59:fb:a0:5b:
da:76:51:78:11:7d:3f:0a:e7:dd:77:90:97:85:6b:
23:52:4f:cb:c2:65:56:7e:6f:03:00:a5:d3:b6:40:
40:2f:28:21:d5:24:79:99:e0:1e:d8:94:3b:7f:e4:
d9:c3:59:0b:60:e2:b6:b5:19:a9:72:2a:62:55:a9:
38:fe:3b:08:f6:f5:e4:8b:cd:47:73:c8:52:ce:f9:
c9:0a:51:f9:5c:30:be:20:6e:d0:e9:21:96:8f:1a:
28:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63961
132106
sbgp-ipAddrBlock: critical
IPv4:
103.28.120.0/22
163.47.36.0/22
203.96.188.0/22
IPv6:
2402:f500::/32
Signature Algorithm: sha256WithRSAEncryption
4b:50:a7:3f:be:c1:18:bb:b6:ce:cb:6f:86:18:ec:27:57:a7:
65:f6:4b:58:4c:e2:f1:80:e3:b7:25:06:5a:cd:ef:96:7a:20:
4c:bd:29:d5:c3:6e:80:a8:5f:d8:23:5e:69:92:a4:dd:85:40:
1b:26:a7:21:9f:12:3e:32:78:32:1c:0c:b6:44:a7:8f:64:1d:
5d:af:17:95:7f:3f:17:3c:ca:30:5d:7d:9c:be:df:c0:50:3f:
37:8f:97:af:1f:23:4a:7d:ed:f6:eb:01:0a:ac:77:57:30:b8:
19:6e:07:dc:47:ad:e5:74:87:f8:5f:33:35:2c:63:df:84:9d:
94:c7:44:f6:d1:78:2d:4c:53:36:29:ab:df:f4:b8:ff:75:00:
a2:8d:80:07:4a:16:1a:14:22:18:ad:79:48:54:c5:51:a8:5d:
be:44:19:89:58:df:d0:0c:db:b4:ef:74:60:a8:89:61:14:e1:
8a:9e:63:3d:e0:05:8d:50:d0:87:35:77:20:04:01:76:f0:95:
f8:a9:83:ac:ed:f6:83:59:0a:82:95:0b:20:65:71:6e:66:62:
36:c2:b2:67:3e:38:a5:24:60:10:9b:ef:de:06:83:51:94:1c:
8d:33:c5:59:d0:88:33:2d:10:c9:07:8b:fc:f5:4a:69:dd:f3:
84:95:60:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:52 2025 by rpki-client