Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
File: kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer (raw, json)
Hash identifier: QCYJtzWtLoyohtC8shkIdrw5zGiz6vfVhWjcdCaQBec=
Subject key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02199D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 06 Nov 2024 05:02:24 +0000
Certificate not after: Sat 31 Jan 2026 00:00:00 +0000
Subordinate resources: AS: 138545
AS: 148972
IP: 103.175.14.0/23
IP: 2001:df7:e580::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137629 (0x2199d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Nov 6 05:02:24 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=A91B952E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:a9:1e:c9:39:24:ac:18:a0:e8:3a:c7:1a:
8d:fa:e1:7f:89:a3:2b:35:bc:84:6c:62:7e:a2:08:
ad:76:b8:42:f0:51:55:49:82:73:e8:29:b2:f6:7a:
1b:2a:b7:a3:58:07:06:8e:a4:0d:53:75:47:55:4f:
d7:e4:f9:ab:70:e4:9f:6c:49:4d:66:71:1d:36:64:
eb:3e:7e:64:13:99:06:53:de:53:90:be:23:59:1a:
0c:7a:76:24:4b:2b:98:af:33:40:a5:07:c6:33:93:
23:d0:b6:71:7c:bb:33:71:4f:1b:47:c4:d0:e8:e6:
54:8d:86:88:8e:0d:62:dd:3b:e8:27:39:c2:de:5a:
b7:b3:d8:26:5a:00:ed:69:19:d7:14:e3:a6:58:22:
f3:8d:c0:70:0d:f2:e5:db:ad:1f:7c:b4:91:22:35:
28:98:fd:9e:c0:5f:5f:fc:26:23:43:ea:9c:5a:ed:
11:89:30:81:b0:c7:1d:b1:e5:4e:3d:8b:20:d2:29:
80:50:42:0c:5c:b9:8c:d9:2d:c1:e4:3a:0f:e2:1d:
c6:f0:ee:28:35:77:e0:06:a2:ff:ac:b0:54:5c:57:
ab:41:7d:48:97:40:27:5c:05:f6:a9:f1:73:36:47:
f6:e7:f0:69:97:34:01:49:6b:ff:6b:50:fb:f2:94:
a3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138545
148972
sbgp-ipAddrBlock: critical
IPv4:
103.175.14.0/23
IPv6:
2001:df7:e580::/48
Signature Algorithm: sha256WithRSAEncryption
7e:a1:24:74:99:bc:b1:75:87:8f:6f:1a:11:9d:f9:41:f2:c3:
a5:83:3b:7e:b9:15:49:c7:d4:a5:84:f2:9d:b3:f9:6d:b0:d2:
31:b5:58:cb:67:9c:b9:cf:3b:31:3f:a8:aa:3c:e5:a4:49:ee:
62:c1:03:3d:53:86:51:a9:b5:7f:12:cb:13:42:5c:ab:d5:ef:
3c:ee:23:48:c0:0a:d4:0c:6c:5f:aa:e7:6d:f2:b0:dd:ac:d7:
f8:e2:5e:83:35:5b:af:dd:a6:f2:47:03:6a:77:9a:75:6f:ef:
34:a0:96:90:43:05:de:c2:07:fb:fa:ad:a2:cb:c4:5d:09:a3:
a8:04:94:3a:53:28:96:df:ca:b9:2d:1a:0f:ad:b0:d0:d6:fb:
1d:02:c4:88:6b:ad:bc:41:27:80:d2:cf:f7:6c:33:4a:7c:20:
62:05:f6:2a:21:f5:99:fc:91:4e:49:09:19:e2:66:07:6d:2d:
16:52:80:f2:c6:9d:36:fb:e5:84:84:bb:09:9d:ca:a8:98:58:
8e:c5:2b:60:56:ff:7f:60:25:a3:20:dc:5b:1f:10:e6:22:dc:
d1:fe:80:c4:9f:f8:05:a1:b0:e6:38:62:d2:f9:fb:a9:10:d0:
d7:a0:41:4e:70:75:97:83:dd:de:08:5e:a4:ad:36:63:a6:68:
4d:5a:22:be
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIDAhmdMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI0MTEwNjA1MDIyNFoXDTI2MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjk1MkUxMTAvBgNVBAUTKDkyMjkxOTk1MzVFQkVFNDQ3MkEyMkZD
NTE5NUIwQTdFRkZDQjY2ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCrYakeyTkkrBig6DrHGo364X+Joys1vIRsYn6iCK12uELwUVVJgnPoKbL2ehsq
t6NYBwaOpA1TdUdVT9fk+atw5J9sSU1mcR02ZOs+fmQTmQZT3lOQviNZGgx6diRL
K5ivM0ClB8YzkyPQtnF8uzNxTxtHxNDo5lSNhoiODWLdO+gnOcLeWrez2CZaAO1p
GdcU46ZYIvONwHAN8uXbrR98tJEiNSiY/Z7AX1/8JiND6pxa7RGJMIGwxx2x5U49
iyDSKYBQQgxcuYzZLcHkOg/iHcbw7ig1d+AGov+ssFRcV6tBfUiXQCdcBfap8XM2
R/bn8GmXNAFJa/9rUPvylKMHAgMBAAGjggMlMIIDITAdBgNVHQ4EFgQUkikZlTXr
7kRyoi/FGVsKfv/LZoQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUI5NTJFLzgzQ0Y4MTE2NjBFNDExRUNBRDE4OEQzNEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCOTUyRS84M0NGODExNjYwRTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRY
cjdrUnlvaV9GR1ZzS2Z2X0xab1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAh0xAgMCRewwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAFnrw4w
DwQCAAIwCQMHACABDfflgDANBgkqhkiG9w0BAQsFAAOCAQEAfqEkdJm8sXWHj28a
EZ35QfLDpYM7frkVScfUpYTynbP5bbDSMbVYy2ecuc87MT+oqjzlpEnuYsEDPVOG
Uam1fxLLE0Jcq9XvPO4jSMAK1AxsX6rnbfKw3azX+OJegzVbr92m8kcDaneadW/v
NKCWkEMF3sIH+/qtosvEXQmjqASUOlMolt/KuS0aD62w0Nb7HQLEiGutvEEngNLP
92wzSnwgYgX2KiH1mfyRTkkJGeJmB20tFlKA8sadNvvlhIS7CZ3KqJhYjsUrYFb/
f2AloyDcWx8Q5iLc0f6AxJ/4BaGw5jhi0vn7qRDQ16BBTnB1l4Pd3ghepK02Y6Zo
TVoivg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:31 2025 by rpki-client