Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybTeSHSWW_87LwRxASJXfm2bHRQ.cer
File: ybTeSHSWW_87LwRxASJXfm2bHRQ.cer (raw, json)
Hash identifier: BX8V+2nmw6pc8YR5XrgmN6NaTJM9m0QQNTmSjZukWTA=
Subject key identifier: C9:B4:DE:48:74:96:5B:FF:3B:2F:04:71:01:22:57:7E:6D:9B:1D:14
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 022E2D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B166D/2E7623581B1A11EA97389F77C4F9AE02/ybTeSHSWW_87LwRxASJXfm2bHRQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B166D/2E7623581B1A11EA97389F77C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 02 Feb 2025 18:48:19 +0000
Certificate not after: Mon 02 Jun 2025 00:00:00 +0000
Subordinate resources: AS: 138905
IP: 103.146.48.0/23
IP: 2405:91c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142893 (0x22e2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 2 18:48:19 2025 GMT
Not After : Jun 2 00:00:00 2025 GMT
Subject: CN=A91B166D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:55:de:60:d2:98:12:f9:0c:af:b3:86:db:15:
67:86:d0:2b:d6:ce:bd:7c:36:b0:c6:5a:ab:9a:8e:
15:86:74:29:af:f5:6f:7a:b9:da:55:cd:a7:35:d1:
d6:ba:8d:38:db:d6:6b:3e:ba:81:2f:fa:e5:9f:a9:
ee:28:9a:ec:69:b5:8a:72:6b:99:64:b5:66:97:12:
10:67:9f:5d:21:4c:1b:3f:19:e7:1d:8b:b2:6a:e8:
45:54:95:b1:4a:8d:59:8b:72:3b:80:c8:d1:1b:54:
7b:1d:c5:19:b4:ca:3b:20:eb:9a:68:e0:64:5f:1c:
7e:f5:5b:a1:16:36:d8:42:f3:03:b2:81:de:ee:e1:
af:d5:eb:e3:80:ee:bb:fc:97:ca:38:4c:bd:d6:2b:
8e:d2:7a:64:7b:63:99:5c:2b:31:0a:e2:2a:51:20:
90:52:e8:04:63:76:0b:56:17:2e:94:56:aa:55:24:
0e:ec:d2:6d:af:2d:8c:d8:06:75:75:79:4c:fb:2e:
9b:d6:c6:3b:60:36:6d:72:2a:4a:a8:28:12:d5:cd:
fb:39:57:8a:dd:fb:38:c9:bf:96:bb:ce:7d:19:03:
74:3c:89:ab:5e:11:fe:49:d2:40:dd:77:fb:16:cb:
dc:97:8c:ba:00:26:aa:0d:a5:26:73:45:06:43:ad:
26:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B4:DE:48:74:96:5B:FF:3B:2F:04:71:01:22:57:7E:6D:9B:1D:14
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B166D/2E7623581B1A11EA97389F77C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B166D/2E7623581B1A11EA97389F77C4F9AE02/ybTeSHSWW_87LwRxASJXfm2bHRQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138905
sbgp-ipAddrBlock: critical
IPv4:
103.146.48.0/23
IPv6:
2405:91c0::/32
Signature Algorithm: sha256WithRSAEncryption
02:81:43:2e:08:08:a8:59:91:84:c3:db:89:74:f8:90:32:da:
65:fa:27:7f:63:b7:eb:ee:9a:92:ac:10:c7:57:a3:98:c4:47:
dd:da:65:9c:8d:d9:3e:e4:73:1e:a1:76:3e:88:d2:bb:2a:45:
ba:35:f8:59:7e:91:c5:69:df:ba:69:2f:79:d9:9f:61:58:7c:
b2:b5:f2:f1:b7:bf:93:df:04:65:35:62:18:13:76:2e:ba:bd:
ed:58:03:0a:ca:53:15:e1:4f:80:7b:4f:03:e7:8f:7f:36:ff:
41:78:4f:51:f6:c6:4b:35:b7:3b:44:86:39:cf:23:d4:e3:fd:
5d:d1:21:f8:78:3a:b6:cb:93:40:34:96:bd:96:f4:6d:10:49:
5f:88:0e:2c:4b:09:3f:42:74:1e:7e:6a:c5:bd:f7:b7:24:65:
f6:4b:21:32:2b:31:06:97:ec:f1:d2:88:ff:54:43:6b:5d:a1:
0a:02:31:4b:62:ba:89:01:b4:25:e4:5d:b1:32:c7:cd:61:e7:
ec:85:bf:7d:ad:f8:d8:5d:73:42:7f:61:89:7a:26:24:31:c9:
35:05:58:63:31:c8:ad:fe:95:c3:29:f1:cb:d2:00:67:4f:db:
53:48:b3:15:6d:ce:95:c0:e8:69:da:15:e2:e1:99:e7:bb:28:
73:c2:f8:ce
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAi4tMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDIwMjE4NDgxOVoXDTI1MDYwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQjE2NkQxMTAvBgNVBAUTKEM5QjRERTQ4NzQ5NjVCRkYzQjJGMDQ3
MTAxMjI1NzdFNkQ5QjFEMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCjVd5g0pgS+Qyvs4bbFWeG0CvWzr18NrDGWquajhWGdCmv9W96udpVzac10da6
jTjb1ms+uoEv+uWfqe4omuxptYpya5lktWaXEhBnn10hTBs/Gecdi7Jq6EVUlbFK
jVmLcjuAyNEbVHsdxRm0yjsg65po4GRfHH71W6EWNthC8wOygd7u4a/V6+OA7rv8
l8o4TL3WK47SemR7Y5lcKzEK4ipRIJBS6ARjdgtWFy6UVqpVJA7s0m2vLYzYBnV1
eUz7LpvWxjtgNm1yKkqoKBLVzfs5V4rd+zjJv5a7zn0ZA3Q8iateEf5J0kDdd/sW
y9yXjLoAJqoNpSZzRQZDrSahAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUybTeSHSW
W/87LwRxASJXfm2bHRQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUIxNjZELzJFNzYyMzU4MUIxQTExRUE5NzM4OUY3N0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCMTY2RC8yRTc2MjM1ODFCMUExMUVBOTczODlGNzdDNEY5QUUwMi95YlRlU0hT
V1dfODdMd1J4QVNKWGZtMmJIUlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAh6ZMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ5IwMA0EAgAC
MAcDBQAkBZHAMA0GCSqGSIb3DQEBCwUAA4IBAQACgUMuCAioWZGEw9uJdPiQMtpl
+id/Y7fr7pqSrBDHV6OYxEfd2mWcjdk+5HMeoXY+iNK7KkW6NfhZfpHFad+6aS95
2Z9hWHyytfLxt7+T3wRlNWIYE3Yuur3tWAMKylMV4U+Ae08D549/Nv9BeE9R9sZL
Nbc7RIY5zyPU4/1d0SH4eDq2y5NANJa9lvRtEElfiA4sSwk/QnQefmrFvfe3JGX2
SyEyKzEGl+zx0oj/VENrXaEKAjFLYrqJAbQl5F2xMsfNYefshb99rfjYXXNCf2GJ
eiYkMck1BVhjMcit/pXDKfHL0gBnT9tTSLMVbc6VwOhp2hXi4ZnnuyhzwvjO
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:48 2025 by rpki-client