Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xctXefg2BxxSgISGkWfLwa4IuRc.cer
File: xctXefg2BxxSgISGkWfLwa4IuRc.cer (raw, json)
Hash identifier: iAfngtYlUJPpgfD46hg+079rhKtcLZLUvtFHUmIS8O0=
Subject key identifier: C5:CB:57:79:F8:36:07:1C:52:80:84:86:91:67:CB:C1:AE:08:B9:17
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022613
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 31 Dec 2024 14:37:16 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 133868
IP: 103.132.84.0/22
IP: 2404:33c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140819 (0x22613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 31 14:37:16 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A913F927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:00:dd:12:90:bc:3f:f3:0c:55:67:cc:63:
04:45:39:1a:80:09:93:97:66:9a:ad:1f:7a:44:14:
f3:91:36:34:30:66:90:72:a7:8a:cf:fa:cc:97:32:
8f:0a:c1:45:bf:d4:35:1a:39:c1:67:90:e3:9d:21:
af:e3:75:3a:c2:a9:85:86:f3:47:30:d1:ab:38:e3:
05:dd:8b:da:27:31:2e:48:52:b0:62:c4:71:39:ed:
c6:2f:5e:e8:78:3a:d5:da:bd:0e:c8:8b:c8:7b:c9:
c1:2d:e9:93:46:7e:0f:e2:fa:da:8f:29:3f:ce:ad:
c1:2b:24:41:2a:2b:82:a4:c4:ca:8a:7a:00:59:ae:
f5:34:9d:d6:15:f5:f9:98:41:70:6a:e3:f4:47:55:
be:7a:57:f5:d5:02:f3:51:e6:5a:ad:75:bb:f2:ff:
9c:d3:80:be:24:58:70:d9:8a:bc:22:e1:9f:48:95:
7f:cb:62:1d:ef:a3:44:12:fc:db:39:bd:52:5d:e1:
71:bb:d8:30:c4:3d:4b:bb:c3:cd:99:80:18:0c:de:
7d:e4:88:85:5f:d1:f2:00:70:35:db:92:78:6b:0a:
af:ea:3d:db:cf:fc:a1:5a:77:f4:51:94:bc:32:65:
01:ab:67:05:cd:f2:af:0a:0c:3c:5d:72:d5:56:b4:
1b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CB:57:79:F8:36:07:1C:52:80:84:86:91:67:CB:C1:AE:08:B9:17
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133868
sbgp-ipAddrBlock: critical
IPv4:
103.132.84.0/22
IPv6:
2404:33c0::/32
Signature Algorithm: sha256WithRSAEncryption
c1:da:16:a6:45:a7:eb:ff:78:c2:24:9a:38:ab:fc:2a:b6:cb:
d5:72:0a:55:60:7f:e1:57:5f:19:c7:6d:2e:9f:3a:36:04:62:
28:6c:ef:a2:95:93:b5:20:0f:ee:e5:eb:37:9a:3d:bb:e9:ca:
8a:cd:9b:f7:02:10:ad:2f:c6:b4:f2:5b:ea:a6:f5:1f:61:06:
87:30:9d:ed:9f:28:76:84:38:1a:f7:4e:2a:23:83:f4:21:e7:
37:59:17:e3:ef:68:70:3c:98:68:1c:27:f5:30:de:c8:28:a3:
14:9c:fd:25:e0:13:33:e4:4c:d8:15:37:ba:09:f2:c4:4d:c7:
9d:b5:91:0c:ab:cd:8c:a5:ec:19:ab:4f:46:26:fe:59:c2:99:
cf:df:2b:ca:e8:b9:31:10:ce:6e:71:18:e9:67:77:2d:3d:ec:
70:1c:90:ab:c2:59:ce:7a:fb:81:3b:98:2f:77:b1:3a:4f:4e:
66:48:06:01:6c:bd:ec:c9:e8:10:48:f4:c2:8b:82:43:5c:5d:
73:49:a6:56:5b:b9:39:10:ca:bb:91:57:81:c1:22:75:43:3a:
51:ee:62:40:76:2b:0d:62:ba:3f:be:82:32:3e:72:98:0f:3b:
85:56:e8:3d:3a:13:f8:bf:77:38:3d:53:44:86:c2:37:58:09:
7c:a2:7f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:32 2025 by rpki-client