Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer
File: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer (raw, json)
Hash identifier: C5tmRmYhgQ+pVOTjc+dEPeA6poJqJUBXpOPvFsTyPY8=
Subject key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023EF9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 14 Apr 2025 18:23:32 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 136434
IP: 103.87.244.0/22
IP: 2405:f2c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147193 (0x23ef9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 14 18:23:32 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9150EF7, serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:99:8f:d4:a2:01:29:1f:ed:1d:5f:7d:45:fa:
54:ba:bf:c3:b4:00:5a:3f:9d:63:a5:e5:b7:bd:6a:
9a:8a:9d:67:10:28:d6:de:af:56:16:0c:d8:9f:89:
79:2e:cf:d8:99:70:b1:03:8e:5a:5e:54:4e:cd:08:
9e:61:3d:1b:6c:ca:29:35:74:0d:78:ba:98:9b:61:
78:40:25:59:02:d1:6e:64:94:2a:b4:75:fb:aa:a3:
57:6d:44:67:06:2a:bf:8e:3d:64:51:f2:9a:a0:6b:
4f:c9:74:7f:70:03:dd:6e:67:f9:14:f8:50:16:b4:
07:cd:15:ed:ed:24:50:ce:01:39:61:1b:5c:bc:d3:
6c:0e:59:95:86:ad:00:d1:50:49:b1:dc:21:d3:eb:
a4:d2:7c:63:42:1c:e3:a4:84:5c:b8:9c:86:5d:48:
a8:7e:c7:42:0f:dc:85:c9:2c:18:43:9e:e1:ad:e6:
b6:f3:bc:18:70:9e:b7:93:50:f1:98:69:96:a1:7e:
31:b8:b9:cd:9a:07:0d:e4:97:f3:7a:74:8d:90:55:
99:2f:e5:9c:13:cd:f3:f5:88:d9:a4:fa:13:04:c1:
82:59:01:da:1e:c0:52:52:ad:40:0c:4d:ec:fd:e4:
2b:8f:d6:ab:aa:eb:95:38:47:91:80:d2:aa:fd:d0:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
136434
sbgp-ipAddrBlock: critical
IPv4:
103.87.244.0/22
IPv6:
2405:f2c0::/32
Signature Algorithm: sha256WithRSAEncryption
a7:e8:8f:b6:6c:67:16:06:f9:c3:a0:e6:c2:2a:d6:05:8d:3c:
fa:f5:37:33:88:37:c9:9b:cb:e3:04:8f:7e:b0:cb:de:86:10:
11:9e:b4:57:df:40:a2:d0:99:74:bd:bc:1a:bc:6f:87:1a:16:
58:00:1e:ee:41:08:e1:fb:fc:73:dd:b4:6f:e7:d6:02:ce:1b:
0f:6e:7f:ce:aa:94:9e:5c:fd:fe:f0:db:fb:9b:7c:ff:02:0b:
37:01:8f:c3:cd:23:4e:25:b7:46:e6:38:e4:38:9c:92:7f:d0:
ca:30:03:b0:0e:60:ed:4c:ee:35:e7:f4:1e:cf:3a:9c:5e:7f:
c2:53:f1:1b:59:a5:73:b3:24:09:dd:93:9b:56:27:7b:a3:7b:
62:67:a4:fa:da:94:e7:f9:df:11:95:e1:47:d5:4c:51:11:36:
82:dd:95:54:aa:e6:a4:c7:42:04:7e:fa:4a:1c:90:b0:52:1f:
f6:52:74:45:32:f7:dc:4b:9a:61:08:e4:1d:94:bc:a1:47:96:
78:87:fa:c3:00:fc:56:f1:9d:35:26:63:76:4d:8f:bf:a7:1d:
a5:f4:6d:a5:1e:04:26:4b:60:ce:73:eb:cf:1d:6c:eb:00:42:
44:58:e8:fc:88:c7:3c:a3:97:0c:68:3d:d4:85:9e:80:67:c9:
e2:77:61:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:49:00 2025 by rpki-client