![](/console.gif)
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer
File: kWov4qosIKsBxaE9I22knbfqUGI.cer (raw, json)
Hash identifier: g+MOxNcSTuXW26MEdHAwdmbYpasjSiR0GsZdDEHQsG4=
Subject key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01F7A1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 06 Jun 2024 14:03:43 +0000
Certificate not after: Wed 30 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 137818
IP: 103.114.198.0/23
IP: 2001:df1:1280::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128929 (0x1f7a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jun 6 14:03:43 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=A912EF71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f0:06:6a:99:05:9a:a3:04:44:88:40:3d:dc:
35:aa:62:61:0b:e0:ca:53:c8:2c:c9:26:36:d3:65:
55:0d:ce:ed:8f:ff:f3:90:f7:a7:63:54:c4:8c:37:
84:28:8f:b8:4c:09:9e:8e:28:c0:8e:e5:4b:be:c3:
70:21:30:8e:78:e7:cb:39:8d:e7:d2:41:9f:00:2d:
23:06:a1:d0:a9:d3:30:1d:d7:3c:21:2c:4a:41:2e:
d7:ae:e7:5e:1a:47:26:34:69:e9:b4:13:ef:2f:2c:
4d:9f:5b:73:6d:62:37:7c:51:7d:62:54:d1:da:ea:
dd:19:85:63:cd:d0:62:26:d0:70:86:8c:38:f6:73:
a2:29:8e:af:62:f4:32:7f:37:05:5b:9d:39:92:28:
3e:24:ac:93:59:24:37:18:78:6e:a6:02:36:88:a7:
05:97:0b:d6:ad:81:42:3d:90:2c:8f:c0:94:b8:fc:
79:2e:77:25:54:ec:b2:e8:4f:f0:c9:cd:26:18:c1:
cd:49:c0:6c:a7:e2:ea:ab:27:a3:fc:7e:00:a1:74:
8b:99:09:9f:4c:a6:4a:66:e1:29:ba:98:27:c6:8d:
d2:c4:08:9d:3f:e7:5c:8e:cc:21:45:7a:9c:0e:fc:
da:d5:9c:18:98:4c:56:8f:81:4e:58:1b:dd:48:d0:
b9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137818
sbgp-ipAddrBlock: critical
IPv4:
103.114.198.0/23
IPv6:
2001:df1:1280::/48
Signature Algorithm: sha256WithRSAEncryption
5b:92:36:39:5e:d5:52:2e:3d:18:fd:05:a8:c9:c5:90:1b:fd:
fd:fd:38:f2:67:8b:59:f2:5e:eb:39:21:06:a9:10:8e:dc:c6:
b6:df:2b:ae:8b:9d:ad:32:98:72:20:bb:c4:4d:d7:fb:15:49:
7d:15:8d:ed:d7:f7:7d:01:8a:fa:d5:5f:36:d3:f4:c8:aa:32:
7f:ca:b8:84:3b:75:5d:69:12:90:52:40:60:da:3f:8e:41:f6:
39:45:fb:eb:9e:7b:4b:3f:2b:48:78:33:a2:3e:6b:3a:0b:ab:
3f:73:c7:05:89:79:ba:41:39:d8:fe:23:bd:5a:47:a9:c9:76:
21:5b:3f:00:00:c9:34:67:8e:70:c7:c4:c2:da:8a:9b:d8:0b:
a0:4d:73:44:34:f8:9d:19:af:13:ef:fa:4f:6f:58:67:21:5d:
ed:39:bd:0e:53:c4:55:a0:e3:b3:e3:b9:01:53:ea:f1:41:a7:
89:e4:4f:8a:6d:5c:ac:45:b1:54:67:4f:3f:71:09:ba:00:17:
2a:85:99:a8:a8:7e:17:61:9d:d8:8b:08:e1:8f:11:54:da:d1:
92:dc:e4:67:74:0f:52:33:ab:c7:98:b0:41:46:2b:90:45:aa:
bf:55:a8:1f:33:df:53:29:42:83:31:fc:a7:ed:8c:39:3a:ed:
46:32:4d:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:21 2025 by rpki-client