Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer
File: zuNPo5_yhfcuIp2ihivBDkiPukE.cer (raw, json)
Hash identifier: vf7GKXsZnaPlaOHBdl/DXahujVYm12fArSjxwziHZ/E=
Subject key identifier: CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 021469
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 17 Oct 2024 02:49:37 +0000
Certificate not after: Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources: AS: 17441
AS: 63834
AS: 141235
IP: 103.40.208.0/22
IP: 103.156.250.0/23
IP: 2406:91c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136297 (0x21469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Oct 17 02:49:37 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=A91A9B3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:2a:ac:ec:08:f5:27:88:ab:bd:21:e1:2b:
08:f1:58:3d:a6:6c:29:e7:bc:43:9d:66:fd:fa:bb:
22:94:1e:33:c7:d3:5f:b6:fe:f7:00:d1:d1:d8:a3:
08:c5:fe:8f:d8:c1:e0:03:df:03:41:06:7e:1e:57:
81:a2:46:20:3b:5b:3e:db:f9:4e:d9:61:50:fa:83:
c9:a7:a5:bb:fc:b8:da:7e:35:6a:4c:b8:6a:69:8a:
b0:14:a6:e3:73:95:b2:31:2e:1d:5b:7b:6c:fc:51:
80:68:56:d5:fc:cd:91:af:4f:fc:c8:0e:8b:2c:86:
7d:39:2a:93:d4:94:27:95:db:41:a1:3d:9d:f6:72:
21:ac:b2:c9:c2:5e:98:51:1c:6b:de:a8:e1:81:e0:
49:7a:21:04:db:85:40:fd:3e:72:8b:0b:10:77:8e:
15:88:f6:95:da:54:57:9f:11:b2:a8:1d:1a:d5:03:
d9:86:e8:c3:4f:04:ec:93:19:e9:76:73:2d:e3:0e:
04:47:c9:3c:75:18:b2:bd:1a:4c:17:11:42:c0:39:
a8:eb:fd:92:c0:db:84:f8:f1:d4:6b:50:0d:1a:96:
a1:aa:16:2d:15:1b:29:21:4d:ee:91:8c:fe:b6:8a:
60:b5:01:e3:24:df:4c:08:14:40:99:bf:66:ca:3c:
71:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17441
63834
141235
sbgp-ipAddrBlock: critical
IPv4:
103.40.208.0/22
103.156.250.0/23
IPv6:
2406:91c0::/32
Signature Algorithm: sha256WithRSAEncryption
27:f9:a7:f4:43:23:e6:1f:1a:0c:1e:cf:af:05:ae:58:ee:ac:
68:4d:24:bd:f4:f0:00:f5:6b:b1:b9:06:51:db:0c:2b:f2:c0:
45:c6:b4:cc:37:64:47:87:e9:b3:21:50:52:71:f0:60:4b:4a:
b3:d3:c7:47:59:9d:f7:28:80:8e:d6:1e:d7:d5:27:c0:a8:d5:
56:41:4b:06:b9:7c:c2:12:e7:a1:bd:07:28:a9:d4:f6:46:34:
e7:82:cc:9f:d3:8c:78:bb:6f:72:4a:4c:f1:14:47:65:9d:5a:
8a:ad:01:8c:6c:8a:c9:ef:72:46:f0:96:e1:a3:57:93:29:f6:
d3:21:0d:f0:1a:13:0e:4f:a4:b7:3e:60:f7:db:ad:c8:f4:88:
94:5a:68:b8:31:5a:00:a0:3c:e4:97:60:d4:8f:3a:ed:62:0d:
29:75:aa:16:26:e3:5e:c1:30:22:57:3b:a4:08:8f:1f:6a:5f:
76:64:b6:f8:e2:ca:25:6a:1c:18:f5:27:10:44:da:25:e0:0e:
1b:b6:9e:cb:fd:2a:a8:ad:68:92:47:41:1a:3c:30:68:b1:6c:
1c:fd:ac:de:36:aa:84:65:ed:cb:1d:bf:0f:86:9d:68:27:af:
ad:43:00:b2:98:f0:fd:6c:66:ba:b8:18:68:84:de:49:f3:1f:
1f:e6:c5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:16 2025 by rpki-client