Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer
File: zPKlJcCQFETKePBbk5LABFeVZ2E.cer (raw, json)
Hash identifier: vMqhmPkaRBwKvOMRvDPW723obzaoQe8w108gnJwLPMA=
Subject key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0227D5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 07 Jan 2025 15:31:42 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 58744
IP: 103.31.96.0/22
IP: 2402:9880::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141269 (0x227d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 7 15:31:42 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A916A071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:61:2d:6a:2a:c7:09:ce:6d:00:44:8a:88:
3b:7a:b2:ae:23:80:31:ed:18:eb:fe:7a:93:fd:92:
25:2f:08:e4:76:dd:f9:fc:9f:ea:4d:75:0b:77:4e:
16:c9:89:f8:59:5c:7b:54:06:2d:98:ec:c9:25:2d:
c7:09:c0:ae:1a:76:9c:41:eb:20:13:e7:41:ae:f8:
29:14:db:4b:00:95:fd:f0:81:1b:61:0b:03:22:ad:
2e:cd:a4:f9:33:72:ee:bd:46:22:dc:ca:88:6f:77:
ee:3b:96:35:5c:f1:cb:04:53:41:75:ca:99:22:49:
be:b0:70:10:9a:82:a5:91:7b:db:1a:b5:34:05:76:
35:7f:9c:1a:1b:ae:b6:95:c3:d2:4e:34:75:5b:96:
6d:f0:16:7b:a2:ee:79:1e:0a:2d:6b:c6:7a:ab:8e:
1e:c4:42:b0:85:db:e1:36:25:3a:91:5b:c3:de:f8:
3d:62:93:dc:1c:ba:be:7c:a8:30:4c:fd:b2:96:29:
b6:d2:56:9b:42:82:de:d8:4b:e3:64:56:fe:70:20:
27:ea:5c:e8:b4:f1:c3:a9:e8:f2:40:0d:86:9d:93:
de:15:27:9e:fd:a2:36:b1:1d:ad:e7:d2:de:2d:3b:
b7:4d:56:22:e0:c1:2f:68:e6:72:55:0a:45:44:d4:
e9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58744
sbgp-ipAddrBlock: critical
IPv4:
103.31.96.0/22
IPv6:
2402:9880::/32
Signature Algorithm: sha256WithRSAEncryption
64:cd:ee:a5:3a:65:f3:5f:a6:de:dc:75:e1:fe:ad:6c:79:e4:
f0:12:10:5f:d7:4e:ce:a7:89:9b:bf:d1:1e:6c:4f:df:50:63:
a6:c1:53:fa:53:a1:70:25:9d:db:d1:af:72:e5:ae:ba:7b:94:
5c:8f:4c:7f:84:81:3d:9d:ab:3a:6e:49:73:78:45:ec:68:37:
33:29:40:45:51:c6:e1:35:f2:11:88:d9:d2:55:02:62:96:e5:
5f:29:33:4a:53:6e:74:8b:aa:69:a2:fc:20:ca:98:57:e6:9e:
29:89:7b:3a:e9:2c:a5:4a:6f:53:b4:d0:e8:50:3d:91:5b:2c:
8c:97:c0:6f:14:be:44:e1:de:ce:22:0a:c7:63:b0:c4:c4:ab:
b6:04:6d:66:83:12:a3:ee:11:e6:9e:96:7e:dd:b4:99:93:82:
2f:b7:22:4e:48:61:1d:2d:ae:b4:38:6c:ad:39:21:b5:ee:3c:
8b:3a:12:47:ba:88:9a:1c:45:36:59:9b:e5:c0:be:76:e6:61:
4c:c1:7d:f3:68:5a:9f:3d:08:52:cb:55:8d:d1:e2:30:be:ce:
ac:99:20:3a:9d:66:b3:15:5a:55:d2:62:55:ce:b0:c1:43:f8:
53:9c:29:33:88:9d:3d:e8:27:5b:e2:4d:74:3e:1b:8f:44:b6:
32:bd:f7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:05 2025 by rpki-client