Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer
File: MOI2HN2l66cF86ay--vl232vEPE.cer (raw, json)
Hash identifier: VBXjtNQ+Jgj7Lk3jOtmtpYLzWbkUnVf3hviJAOVQydg=
Subject key identifier: 30:E2:36:1C:DD:A5:EB:A7:05:F3:A6:B2:FB:EB:E5:DB:7D:AF:10:F1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024A7E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 31 May 2025 23:01:08 +0000
Certificate not after: Wed 01 Oct 2025 00:00:00 +0000
Subordinate resources: AS: 142124
IP: 103.166.170.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 16:13:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150142 (0x24a7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 31 23:01:08 2025 GMT
Not After : Oct 1 00:00:00 2025 GMT
Subject: CN=A91386E8, serialNumber=30E2361CDDA5EBA705F3A6B2FBEBE5DB7DAF10F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:52:18:91:05:55:c8:da:54:f8:77:d2:5e:df:
72:22:4b:a1:e1:d3:4c:50:76:83:cc:b9:ba:7e:3c:
dd:ea:c5:b3:60:55:f6:6e:23:3a:d9:84:ba:e5:03:
ac:0b:a5:62:d8:33:7b:82:49:3c:d9:c4:17:86:82:
f2:23:c4:fa:83:c5:44:dd:cc:21:29:35:f9:a4:9f:
d2:80:f7:45:fe:0c:46:96:78:2c:b4:8d:bb:ab:6a:
da:de:06:c2:5e:76:22:90:e7:d7:c5:20:de:f2:a8:
8f:ce:3d:57:9f:27:d6:46:81:69:79:ab:42:99:0a:
67:a4:d5:51:d5:17:23:ff:0d:33:59:2f:0b:a3:80:
52:a2:60:93:cf:9e:c9:f3:50:49:ac:26:fa:79:55:
44:29:a1:57:a9:0e:a7:19:da:9a:04:59:2b:2b:78:
8b:a8:9b:2d:63:8f:3b:e9:9a:7b:a4:5f:0e:85:3a:
81:45:9c:51:aa:e7:ef:06:e5:bf:c8:78:66:99:7f:
ad:fb:4d:d5:22:6d:8f:2e:46:dd:8a:5c:03:76:89:
9d:2d:c9:7a:79:05:16:12:49:9f:d7:0f:6e:6e:7f:
2d:af:9a:84:8e:be:0c:dc:9c:d2:a0:4e:67:84:44:
a7:d0:eb:52:2d:c5:22:d5:03:9d:e1:29:74:9e:9d:
1b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E2:36:1C:DD:A5:EB:A7:05:F3:A6:B2:FB:EB:E5:DB:7D:AF:10:F1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142124
sbgp-ipAddrBlock: critical
IPv4:
103.166.170.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:27:98:4e:1a:74:79:5a:8a:38:96:cd:ed:7d:5e:8d:c9:bb:
4a:20:63:9f:53:3c:14:0d:03:ae:72:43:bb:55:44:3b:90:fa:
f4:f6:66:05:fb:c3:11:de:62:f3:3c:f8:35:4c:3b:62:e8:f9:
64:f3:aa:4f:66:b7:a5:ce:e0:da:b3:bb:9c:b2:a2:d3:e6:16:
34:06:86:da:fe:bb:50:31:9c:7f:d0:62:58:e2:bf:b1:04:05:
4b:85:9d:4a:64:a2:e9:8b:62:75:63:cc:3d:93:fb:ca:28:0c:
d6:ca:da:83:20:46:63:76:bd:dc:4d:90:0f:b5:da:6b:14:56:
8d:4f:5f:1c:23:66:02:0d:f6:c1:97:dd:fa:43:78:da:1e:e0:
df:ae:e3:d4:cd:5d:b1:f3:83:ba:50:17:61:57:ee:97:0f:97:
42:1b:4b:df:2f:75:14:aa:85:98:b2:40:df:df:05:eb:89:60:
25:fd:9f:c8:16:29:41:21:17:dd:ec:6e:37:4f:b5:11:23:39:
e0:2f:ee:b8:13:ea:fd:14:27:f8:1a:8a:64:e6:d5:fd:54:e2:
ad:b6:02:57:e3:c9:be:91:5d:68:28:36:c4:da:f9:26:d1:7f:
92:e4:62:f4:b4:30:80:7c:14:9d:16:19:c1:09:82:f8:3c:20:
cd:f4:71:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:18:30 2025 by rpki-client