Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer
File: 82dKiQfpsa6O4m-c88mcR_dUk0w.cer (raw, json)
Hash identifier: 8SaSElym3LXPJ5x37ms+4vvkqaT9F0eZBBdJZpM5lOc=
Subject key identifier: F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023D32
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 05 Apr 2025 15:27:01 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 149636
IP: 103.183.62.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146738 (0x23d32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 5 15:27:01 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91910A8, serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:e1:63:9c:33:d5:88:b7:6d:de:f9:8e:03:
9a:a9:0a:2d:e0:26:95:f6:df:60:60:3e:6b:01:be:
b5:52:4c:94:f3:9b:7b:d6:17:20:b4:b4:1b:2c:d3:
09:21:07:45:71:10:aa:df:c1:28:1d:f8:01:84:1b:
bf:8b:62:54:ca:9e:fd:ed:21:e7:be:6c:63:09:48:
6b:50:3a:e7:dd:0f:de:bf:2d:2f:40:0d:a1:38:7c:
f0:da:08:12:a9:f0:49:15:59:c7:9d:07:89:d5:d1:
8c:89:96:ef:08:09:30:7f:6f:48:02:0c:b8:61:3c:
1e:9a:7b:19:b7:38:0c:00:54:a9:88:ae:c8:03:f1:
11:25:91:86:ab:d0:3e:2c:1b:d6:9e:d6:a7:1a:16:
45:ba:f1:b5:f5:82:c1:b5:f6:81:00:07:06:5d:68:
52:b8:bb:c2:15:84:d9:84:47:9e:03:06:05:0a:71:
3c:96:f7:1d:ce:2a:f9:64:5d:4e:3f:25:a3:c4:b3:
c4:27:ab:bf:46:aa:57:30:9c:5a:b6:64:4b:7f:0a:
ea:59:d8:a4:ca:26:6e:9a:87:c2:9a:0b:f2:7e:3c:
44:41:3e:0b:c1:d3:32:69:af:6a:94:2a:ad:ba:03:
c7:7d:f7:3b:1e:af:6f:bd:05:00:e0:0d:ad:46:e5:
e9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149636
sbgp-ipAddrBlock: critical
IPv4:
103.183.62.0/23
Signature Algorithm: sha256WithRSAEncryption
d5:e5:c4:24:cc:f2:81:31:2e:3f:82:95:cc:0c:90:24:84:ff:
19:94:32:30:d6:a7:c7:61:63:2d:be:f4:2a:8c:1b:e9:42:11:
f3:8d:b0:9d:b6:65:2f:0b:5e:15:ca:48:03:7d:47:3c:1b:9e:
06:87:07:ae:92:51:61:13:e1:05:11:c8:1f:8f:31:78:2f:34:
ac:cb:ec:a7:76:92:a4:2b:b3:86:36:4a:dd:3e:0e:63:2b:4a:
30:c2:89:b1:ce:05:8b:0f:27:d9:ec:29:eb:0f:5f:ce:6f:ae:
f3:77:49:e0:cf:c3:68:72:01:2c:28:3f:90:b6:d2:32:4f:77:
13:f0:43:5d:e3:f1:e6:72:e8:1a:ac:1e:3c:b6:5d:91:0e:c4:
79:d8:53:13:ce:1f:ce:c7:39:78:f0:e3:c9:0c:93:a1:4c:8e:
46:c6:44:dc:f7:96:37:27:c1:86:84:41:60:ba:1e:56:f6:e6:
70:3d:86:49:bc:11:6f:97:58:09:95:44:d9:43:7a:e5:76:58:
e0:0c:76:d9:4b:38:ce:b3:cb:48:2d:d4:85:10:f2:f2:79:42:
52:d0:78:c9:4f:24:3d:a3:d0:74:99:79:5b:bc:fd:16:52:4f:
07:b6:69:96:48:aa:0d:0c:bb:e5:d3:1d:be:45:f1:44:8e:4b:
6a:b0:b7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:45:33 2025 by rpki-client