![](/console.gif)
Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vW8yJwkswpQOGkXy4_RJHw3c26I.cer
File: vW8yJwkswpQOGkXy4_RJHw3c26I.cer (raw, json)
Hash identifier: ZT81iZe98KYJe0FB3hhgmJKXkorBkU3FntifiSPNW5M=
Subject key identifier: BD:6F:32:27:09:2C:C2:94:0E:1A:45:F2:E3:F4:49:1F:0D:DC:DB:A2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01E359
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9130D77/54B30422454011EB8861352FC4F9AE02/vW8yJwkswpQOGkXy4_RJHw3c26I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9130D77/54B30422454011EB8861352FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 07 Mar 2024 13:20:36 +0000
Certificate not after: Wed 28 May 2025 00:00:00 +0000
Subordinate resources: AS: 133959
IP: 103.50.14.0/23
IP: 2402:5080::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123737 (0x1e359)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 7 13:20:36 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=A9130D77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:ff:4e:a1:20:fe:19:26:8e:2c:cf:c8:69:
68:95:9f:e0:25:00:33:f9:6e:6d:1c:37:6c:3a:85:
3b:95:7f:46:ca:17:9e:6a:16:9a:dd:83:ef:5d:1f:
9c:f4:84:5b:2a:8b:b0:89:35:99:5e:75:27:7e:e8:
8a:dc:f9:8a:bd:a2:23:67:c2:7c:da:07:e4:1b:03:
4f:8c:e0:94:74:bb:6c:a2:58:df:b1:ac:f7:7b:64:
9b:ec:ef:b4:d6:96:e3:85:05:cc:75:85:a8:97:76:
3e:d2:52:2a:8b:f7:c1:b9:f6:22:e1:00:a2:8f:76:
a5:94:ff:77:65:be:24:48:ff:2e:99:89:7c:2a:d3:
a5:4d:d7:1a:6b:bf:42:88:09:89:c8:a9:2b:21:3e:
ce:d1:dc:4f:49:f7:7b:a9:e4:1f:bb:d8:ac:74:75:
bb:58:1e:2f:41:81:85:ec:f0:8c:f8:a0:90:1d:eb:
2e:25:6c:82:11:1f:4c:68:4f:b8:1c:14:9d:ad:b8:
b7:42:15:13:08:09:d5:f3:06:06:4c:5e:bb:40:f8:
04:7d:4e:ef:ad:56:50:21:12:9c:c1:e0:60:ea:48:
ed:31:03:85:e1:f0:08:5d:d8:f7:79:e3:fd:2e:83:
77:bd:ad:df:6b:45:50:48:36:88:8a:21:23:52:8e:
a4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6F:32:27:09:2C:C2:94:0E:1A:45:F2:E3:F4:49:1F:0D:DC:DB:A2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9130D77/54B30422454011EB8861352FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9130D77/54B30422454011EB8861352FC4F9AE02/vW8yJwkswpQOGkXy4_RJHw3c26I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133959
sbgp-ipAddrBlock: critical
IPv4:
103.50.14.0/23
IPv6:
2402:5080::/32
Signature Algorithm: sha256WithRSAEncryption
71:c7:46:3c:61:d7:9d:4a:4c:63:f1:64:e9:64:0d:17:82:b5:
42:fa:74:83:d8:a3:58:16:87:ad:7f:80:1a:b2:09:31:45:d3:
66:7c:ac:0f:a0:fa:13:03:99:3f:ed:c1:70:4f:d4:4b:3b:ae:
e8:83:7c:c5:4b:38:b5:95:3b:cd:68:b6:9d:06:2a:3a:47:75:
16:c4:8c:be:b6:ea:9e:4f:19:be:24:a9:16:54:08:fa:a6:ef:
ed:d6:d2:ab:e7:e3:4f:cd:c5:b4:82:c4:56:e7:a9:f9:7f:27:
b6:6f:dc:06:c0:26:55:c8:ad:1f:a8:7e:dd:ae:77:05:25:e1:
50:78:41:4b:24:6d:16:5d:a0:30:46:bd:71:a2:3f:cf:69:3b:
9c:0b:9f:40:09:06:24:ce:c9:55:e7:71:6f:6b:6a:91:8b:6a:
8b:8b:b5:0c:3e:8c:ae:a3:1f:5f:7c:66:2e:1e:33:0f:65:62:
d2:39:9b:4b:89:59:60:6b:8a:7d:d0:3b:ee:06:da:ba:01:36:
78:24:0d:a6:72:dc:55:ac:15:f3:d0:18:cd:5c:ac:d1:29:16:
ab:48:b6:11:e4:58:0a:27:48:20:5b:34:a7:ef:fa:e8:b4:73:
65:8b:01:a5:c5:92:b3:72:d2:15:66:51:cd:f8:6f:8d:18:9a:
da:42:5a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:37 2025 by rpki-client