Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer
File: uttpn6AqlXLm70n0-Rof4Kc8LI0.cer (raw, json)
Hash identifier: rDcqUWW03Hjsl7t09c1wIc79NHQCxGCtYdoMlxskh2c=
Subject key identifier: BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0223F3
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 20 Dec 2024 20:54:33 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 24321
IP: 202.73.8.0/22
IP: 202.87.216.0/22
IP: 2407:6000::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140275 (0x223f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 20 20:54:33 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91E27B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:fe:e8:14:bd:5f:92:f1:c0:2d:2d:2f:33:
9c:e1:cb:c1:0a:d0:dd:32:d9:95:ca:6a:c9:08:f1:
67:aa:b6:be:0b:5e:7d:7a:8c:fa:28:74:7c:a3:f8:
e2:49:ab:fa:31:1f:88:70:7f:76:ba:b8:5f:c8:59:
66:2e:6a:2b:0c:d8:27:a5:c5:33:c4:15:9a:a1:26:
99:02:cd:c3:62:b5:1f:46:49:fd:5f:bb:56:6c:db:
64:69:9c:23:19:6e:e4:e7:03:46:56:43:c0:08:3b:
ac:84:f0:1e:00:3f:70:55:47:7b:80:8c:8a:db:6f:
0e:f3:9e:a3:68:42:89:5b:ac:09:d2:c8:f7:bf:33:
9e:74:e1:ce:26:14:97:37:ae:42:a0:1e:01:3a:15:
35:1f:c8:52:bc:db:cc:c1:76:cb:6e:d3:bd:0a:c1:
77:20:a8:bb:19:21:34:b0:c4:f9:16:15:14:78:25:
24:ca:f9:98:fd:d9:f1:37:e1:91:c9:ec:ec:9a:ff:
67:3c:d5:89:02:54:1e:70:98:ed:1a:fd:73:a7:bf:
0f:7b:4f:79:a1:93:5d:fb:e7:75:ab:5a:a3:6b:a4:
0b:30:d7:7c:64:39:c1:45:c5:96:2a:49:56:2e:e0:
e1:9a:06:78:ab:14:92:99:db:da:42:38:f0:dd:5c:
74:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24321
sbgp-ipAddrBlock: critical
IPv4:
202.73.8.0/22
202.87.216.0/22
IPv6:
2407:6000::/32
Signature Algorithm: sha256WithRSAEncryption
19:8c:60:7a:b1:0a:e6:a2:4b:7c:04:37:87:56:12:3f:23:40:
25:f7:6e:5d:96:78:ec:3b:fa:9f:07:75:7d:de:ae:7e:2c:c9:
eb:47:7c:7b:53:bf:20:82:fe:b5:53:d3:4c:7d:c6:0e:bb:da:
6b:f0:a9:b8:65:90:7d:ec:a0:05:ed:74:c6:05:da:56:c5:db:
ca:c2:78:52:cc:08:c9:6d:5c:66:7d:d9:5c:8e:83:0b:4e:4e:
bc:31:d9:9f:23:75:e8:bf:a8:95:19:da:9b:47:77:30:38:e7:
de:03:bb:1f:4d:77:bb:6a:29:37:2a:41:19:62:ee:94:f4:d3:
cb:bb:db:ee:c7:30:6e:04:19:86:98:d3:e8:82:ac:af:d8:17:
25:72:ce:a9:24:e9:02:43:3d:2c:69:24:73:3f:e0:f5:66:b2:
7f:30:0a:74:9e:e0:6c:d1:bb:8e:88:77:a9:d5:42:86:72:2e:
9e:36:49:68:8f:c2:a9:89:b7:b9:a1:5c:bc:de:c1:97:7e:dd:
0b:56:52:3f:11:08:6f:ff:d5:b8:12:59:6f:7b:38:10:1c:2a:
1e:d3:36:ed:25:2d:1f:f3:9c:fb:eb:a2:56:0f:8d:a6:9d:ba:
69:f9:a6:72:76:08:b8:61:ad:60:c8:f4:2d:14:7d:14:de:0d:
e4:7f:54:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:13 2025 by rpki-client