Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
File: ArpjtYYuJwm5DRa33C61z8ii5oQ.cer (raw, json)
Hash identifier: 0LQb4eRZB5V/Bx2WtxHMb0NTDN3qwtbNsb2fAVDOF0k=
Subject key identifier: 02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023D47
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 06 Apr 2025 16:31:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 151044
IP: 103.224.55.0/24
IP: 103.244.49.0/24
IP: 2001:df2:2ac0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146759 (0x23d47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 6 16:31:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A91B43EE, serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8f:65:80:1f:75:69:9b:06:d1:6c:9f:d9:e2:
38:5f:6b:0e:e8:f9:91:18:20:44:dc:8b:5e:61:5a:
3f:10:8b:12:20:e2:be:72:d6:77:67:e4:81:27:52:
8d:17:08:0b:c6:6d:74:29:16:05:5a:32:0a:bd:5d:
c8:f0:ee:93:3e:2d:29:cd:31:90:9b:e1:71:37:9d:
c5:61:ac:a2:f4:14:8b:d7:99:b7:25:22:19:4e:32:
b3:dc:ef:18:b3:03:81:e7:38:82:79:7f:58:9c:17:
5c:93:e5:a7:d4:85:7e:6a:f9:ea:9a:a6:cb:67:46:
c8:60:07:f7:ef:28:59:e9:e5:ee:d7:55:ad:97:db:
93:d3:58:49:46:ee:c2:04:66:c8:90:d3:20:f7:61:
27:1b:e9:38:f3:45:e6:33:bf:ea:74:df:b8:7b:35:
09:c6:a2:33:ba:92:74:3b:8f:8d:ad:3b:43:39:d3:
5e:fb:ee:c5:5b:f5:ab:5b:0c:ef:5d:54:ed:a4:75:
38:74:51:da:3e:81:cf:ab:32:cc:37:d8:1d:fb:e3:
8f:bf:f5:9b:19:ee:39:8b:d8:da:85:94:10:07:87:
64:11:cd:f4:40:2f:9d:dc:f9:0c:2c:a1:3f:03:b3:
c1:38:26:a7:98:1a:52:33:49:79:0e:54:fd:f3:6a:
c8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151044
sbgp-ipAddrBlock: critical
IPv4:
103.224.55.0/24
103.244.49.0/24
IPv6:
2001:df2:2ac0::/48
Signature Algorithm: sha256WithRSAEncryption
83:a6:d8:74:a2:db:f7:35:ab:c2:6c:2f:80:3e:fa:9b:aa:14:
f3:11:54:e4:4b:e0:13:95:cc:0b:17:8f:d0:91:ce:50:0a:bd:
38:37:c5:e7:73:38:bc:a5:91:36:8e:e7:99:9c:d3:68:d7:ac:
10:d6:06:07:ef:31:97:06:3e:82:0b:e3:a6:79:b1:b6:46:c3:
8b:36:cb:66:f3:e4:c9:32:26:6e:5d:ff:9a:ec:bd:4b:b1:2c:
fa:18:71:bd:38:f5:0d:ee:73:77:0a:a4:7d:47:ee:e0:e9:2d:
ed:97:f4:07:f3:56:f2:e3:4d:c0:96:67:fb:a5:f1:60:33:27:
27:ce:88:38:5c:0c:ef:9f:4e:6b:59:e4:ea:76:03:47:6e:b7:
55:2e:14:72:8d:55:8f:3b:72:bc:a3:07:96:0f:03:cd:95:9b:
62:85:42:85:4d:21:b3:af:89:45:e7:9e:89:fd:00:64:69:0b:
f4:17:89:69:96:6c:85:7b:16:37:97:f2:b8:3a:1e:4b:eb:ae:
bf:40:00:6a:02:21:60:ac:97:f8:1f:c6:5a:0a:8c:6f:4b:68:
bb:84:5d:ce:46:d1:dc:70:16:52:b4:bd:4d:b2:07:26:17:79:
7f:e9:e0:a4:9f:c8:b4:3f:bb:d5:83:40:6c:ad:05:b9:ba:a2:
34:50:41:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:56:56 2025 by rpki-client