Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer
File: B-7MRCaowz1FkLzaEtl1DEkEhX0.cer (raw, json)
Hash identifier: TcQyyP13/GLAIWWYci+OvBWsWRyFuSCzY31YocpW34I=
Subject key identifier: 07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023288
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 21 Feb 2025 07:08:26 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 45631
AS: 135400
IP: 203.176.122.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144008 (0x23288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 21 07:08:26 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A914C90B, serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2d:b5:b6:85:3f:a6:06:b5:79:18:fc:8c:65:
eb:ab:54:87:ca:a5:34:b0:74:b0:f1:25:61:49:f3:
94:63:b5:3e:aa:c3:73:bc:a0:4f:aa:33:9d:f2:28:
ba:49:88:a6:ad:38:ae:47:25:f1:89:cd:1c:f3:17:
29:17:a0:95:51:03:1f:52:5d:f2:16:6a:3a:fc:70:
ac:57:5f:ef:e2:51:a3:23:d1:a4:fe:5b:ae:7f:e5:
4b:2c:29:61:8a:56:6a:99:3c:90:3d:d3:db:cf:e4:
79:8a:d5:6a:ea:6d:2d:1e:4d:75:0b:4e:34:96:2e:
15:69:4a:65:a2:e8:c2:1a:95:d6:15:a0:51:ca:06:
89:97:cc:f5:28:0a:39:75:23:93:68:0d:57:2d:d9:
38:f6:77:fc:41:c8:11:60:f8:3c:28:43:87:d5:1c:
54:cc:4a:1c:5f:8f:7c:6b:a5:27:4a:62:b0:89:81:
68:54:43:b6:86:7b:65:84:a9:61:d6:27:4c:cb:11:
cf:11:29:0c:b5:d0:ec:59:12:09:23:24:84:a4:14:
8a:30:1f:17:f6:4f:c4:09:63:a3:a4:83:2c:69:a8:
79:cf:13:bf:d7:2f:80:0a:56:bc:b0:72:46:f9:d3:
8e:30:ec:68:f2:96:13:14:3c:76:48:ce:b5:e4:cf:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45631
135400
sbgp-ipAddrBlock: critical
IPv4:
203.176.122.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:85:c5:b9:b0:ee:55:5f:04:15:de:1e:05:8e:be:87:e1:94:
40:bf:64:6d:4a:ed:40:59:d5:10:88:91:9c:b1:3a:ef:c2:f7:
59:7a:da:14:ef:6f:8f:fb:ba:b1:5c:d2:d4:3a:a5:0d:b6:51:
f4:f5:99:5a:55:fc:88:c6:0c:42:6d:48:27:47:85:e6:90:bb:
15:32:80:4c:bd:1e:cc:d9:75:5b:a7:b8:22:22:cc:67:11:2c:
a3:20:63:6b:04:78:be:09:54:8e:26:da:6a:c9:ca:1c:39:e4:
6b:cd:6a:28:79:43:ed:3a:b6:ea:62:d0:9d:61:a6:9d:42:8b:
85:f0:37:d6:09:c3:5b:b9:2e:9c:86:3a:e9:0d:f7:cd:b1:cc:
05:ba:e5:53:cf:f1:2d:3b:25:8f:d9:58:c4:af:66:78:7b:ab:
f6:95:c6:70:47:f1:77:58:41:30:af:e2:7c:4d:7a:cf:b5:3b:
59:f2:72:db:40:83:3c:97:7a:dc:96:77:8f:98:de:3e:27:c7:
9b:06:55:a2:e5:b0:7b:01:eb:88:42:d8:8e:11:73:f2:16:1f:
24:7c:89:75:c1:da:a4:c8:7e:db:aa:4f:25:11:79:db:fb:8d:
e3:3c:29:0c:de:67:f2:cd:df:e3:49:07:a9:b9:8d:f9:22:19:
f5:05:75:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:56:01 2025 by rpki-client