Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
File: _oJu6bwS2q07GXRxsEE_HrIIJjU.cer (raw, json)
Hash identifier: l1nj/cBqJDC1W6uQ8eEY2dnrSWBYR8RRC72ZVXBADHs=
Subject key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0233EE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 28 Feb 2025 14:33:59 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 17666
IP: 43.246.164.0/22
IP: 103.35.136.0/22
IP: 111.67.32.0/20
IP: 202.9.96.0/20
IP: 202.87.96.0/19
IP: 2401:200::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144366 (0x233ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 28 14:33:59 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:12:36:1d:a4:9f:65:f0:60:9b:cf:40:97:
bf:83:26:8a:9b:d0:8b:8b:b1:65:95:e5:c2:7b:6b:
9c:c3:dc:14:01:5e:07:7e:e2:45:b7:d7:31:5e:0c:
70:6e:d3:2f:ec:61:f1:c0:17:d1:7e:66:72:1e:7e:
05:0d:f2:3c:97:5b:d6:ac:74:3c:48:22:59:5e:5c:
9b:41:2f:42:55:9c:55:dc:a3:a5:17:d6:a7:5a:83:
97:25:9a:b9:59:5d:74:52:bb:0c:6a:7a:30:67:4a:
03:99:5e:15:d3:d1:2e:29:bd:b4:d0:5c:d9:8b:fc:
a5:75:24:86:4c:64:9e:cf:a6:1d:43:e9:57:5a:c5:
27:01:9d:e0:90:f1:53:1e:e5:4d:1a:30:fa:80:27:
98:0a:5a:b8:49:2a:ff:37:53:c9:3b:01:d5:52:d5:
19:8b:1b:b8:79:be:f4:44:a1:03:ac:b8:d7:9a:bc:
cf:d3:46:bb:5d:e2:77:a0:4a:a7:d2:3f:51:bc:b8:
8c:21:09:f9:e8:8b:a5:91:66:db:37:54:48:f8:5e:
7f:84:3b:19:7b:bc:2c:2c:ef:ed:72:88:24:8c:d0:
12:07:00:31:72:34:8f:cf:ba:e4:b9:2b:9c:b9:05:
94:dc:f9:c4:1f:c8:28:fa:4d:6d:a6:ea:50:ec:fd:
3d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17666
sbgp-ipAddrBlock: critical
IPv4:
43.246.164.0/22
103.35.136.0/22
111.67.32.0/20
202.9.96.0/20
202.87.96.0/19
IPv6:
2401:200::/32
Signature Algorithm: sha256WithRSAEncryption
4c:a8:01:91:46:1c:6d:36:91:76:ad:d7:50:a8:d7:5a:4e:87:
45:71:31:e3:83:33:9b:44:52:e9:5e:18:ff:ed:4c:82:88:7a:
bf:72:c5:02:74:7e:c3:06:11:36:98:d6:32:18:52:ed:57:4c:
63:54:c8:63:4b:95:6c:22:01:d4:b4:c4:5e:13:a8:32:25:cd:
01:d3:66:b1:29:9d:b1:2d:5c:63:d8:08:d5:14:40:3a:0e:94:
2f:77:f9:e0:99:4d:7e:bd:52:df:74:4d:b3:ce:76:0c:0e:b3:
2d:d6:90:f8:f0:2b:c0:ae:bd:02:d5:69:27:c9:34:12:ea:ee:
4d:31:14:b5:c8:8f:5e:6b:c7:00:18:6d:ce:10:9d:98:1d:f4:
f5:b0:cf:93:b5:45:41:7b:95:7b:29:80:5b:3e:ee:ee:90:91:
0b:09:bf:3c:e1:66:db:15:25:08:d7:31:8a:a2:75:41:97:d7:
9c:7b:4e:c9:75:96:6b:fa:0e:35:29:72:ce:50:9a:81:65:ee:
a6:ce:ae:f6:37:dd:16:98:08:e7:48:31:4a:30:4e:43:59:96:
85:69:4c:06:4a:19:ec:5b:45:40:59:df:70:a6:5f:db:ce:56:
fb:9e:45:60:52:a6:fc:c7:19:b9:46:a4:f6:15:0b:88:c0:d3:
f3:9d:4f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:50:28 2025 by rpki-client