Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer
File: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer (raw, json)
Hash identifier: 8A4cImaA3SYJli8IrayB8RBt7TTM5Om6sCsuEKYM/WY=
Subject key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023E24
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 09 Apr 2025 18:44:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 135416
IP: 103.113.109.0/24
IP: 103.113.148.0/23
IP: 103.218.164.0/24
IP: 2402:bc40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146980 (0x23e24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 9 18:44:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a2:23:c1:c1:5f:e0:ba:0d:f6:e5:93:14:a2:
ae:a9:82:0f:05:d7:0f:9b:2a:6e:c3:8a:09:99:05:
89:ca:9f:a8:78:c7:38:ee:58:66:bb:7b:54:12:d6:
32:e0:8f:e1:e9:2d:69:49:0d:54:42:c7:5e:11:3d:
1b:f4:9a:f7:20:f6:3d:bf:ba:1f:55:42:67:53:af:
02:84:d7:62:1c:aa:39:55:b6:76:93:7c:97:8a:dc:
27:94:f2:4e:e0:d2:73:ff:38:50:d1:13:aa:af:7c:
ab:cd:cf:b5:24:d8:f0:8b:bb:c8:f5:58:bb:3d:fa:
a3:12:d5:c0:a2:a0:7b:46:40:a7:6a:ee:42:92:e7:
fe:54:72:40:90:6d:41:c4:0d:17:78:d3:91:fc:8b:
85:88:75:05:0a:eb:2e:cd:47:b5:dd:2c:2c:dd:59:
b1:2c:e8:1f:23:dd:b2:3c:c0:23:4c:0a:4e:9e:ca:
ad:44:25:65:9f:a9:9b:4e:4b:02:ce:e4:6c:cd:16:
d4:ea:92:6c:71:cb:31:1a:29:58:95:19:b8:c4:ca:
49:64:93:ea:1a:86:26:54:b9:4d:18:49:7a:01:75:
21:cf:37:2b:ef:d4:47:53:6d:e0:37:de:23:64:98:
a7:a8:ab:b4:f9:d7:25:78:52:5e:58:30:1b:54:e2:
9c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135416
sbgp-ipAddrBlock: critical
IPv4:
103.113.109.0/24
103.113.148.0/23
103.218.164.0/24
IPv6:
2402:bc40::/32
Signature Algorithm: sha256WithRSAEncryption
ce:2b:c3:9a:09:34:e5:94:69:13:c2:f0:a8:a1:ca:0e:62:d0:
f6:41:6d:58:b6:da:9e:38:78:b3:b1:ce:ef:34:99:fb:6c:99:
61:4b:a3:83:27:97:af:0b:1d:b9:88:7c:af:10:ad:dc:27:e0:
ac:b6:78:a3:ac:85:7f:f8:52:bb:57:2b:86:56:cc:7b:27:87:
09:b3:1c:f5:68:61:a7:a1:db:d4:51:5d:e9:0f:7b:48:4e:1e:
40:f8:3d:42:dd:7c:a7:7a:4e:05:1e:fb:6a:28:fe:a3:b3:97:
6f:95:59:f9:cb:33:28:8e:05:f9:37:32:e9:c6:ed:a0:cc:61:
95:5d:a3:4f:21:8e:74:10:1c:cc:fb:9b:ae:49:4d:ca:01:61:
a4:92:3b:70:da:68:62:e7:db:f0:65:d9:ad:d7:c2:1f:39:0f:
17:47:23:66:c4:48:65:b3:c6:e9:f7:b8:2e:63:1a:51:33:06:
24:c5:a4:55:f6:29:62:c8:ad:25:ce:dc:f5:1d:2f:ce:4e:2b:
a4:b3:07:e7:52:c2:f6:ef:a7:20:02:0d:a6:a9:26:1b:ec:dd:
f1:8a:59:78:dd:4e:c0:5f:82:4c:4a:35:37:85:d0:eb:47:0c:
28:43:21:e2:ec:54:7f:90:78:13:5f:5f:53:19:9c:19:ae:01:
40:8d:c1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:41:11 2025 by rpki-client