Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
File: a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer (raw, json)
Hash identifier: p3qIuM6NXQIFgoOAhH6UxUHeDRixXb7iHBrooBv1ePU=
Subject key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024038
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 22 Apr 2025 18:14:30 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 138925
IP: 103.137.72.0/22
IP: 2404:ac40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147512 (0x24038)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 22 18:14:30 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:ea:34:b2:b4:d5:9e:6f:ed:98:9e:b1:fc:
97:fd:1c:60:0d:26:15:db:98:00:4e:b4:5d:8e:a2:
10:6a:a5:b7:37:d2:87:46:f3:28:62:e7:cb:2b:0e:
a3:a3:da:75:bf:2c:79:5b:32:94:5e:7a:33:0c:34:
22:73:05:a7:2f:40:e0:83:7b:87:8b:f7:56:17:bf:
9c:2c:f6:a1:77:04:94:1f:b1:92:24:0d:cc:c1:36:
4f:56:27:37:2d:2b:13:5b:59:0d:7a:b2:76:e0:6d:
c8:96:ae:24:9f:ed:3d:eb:7d:16:19:32:fe:1f:38:
ff:9f:51:ee:e5:e1:59:15:30:87:50:60:23:b5:29:
78:12:9e:d1:40:56:e4:c3:ce:be:ac:c7:46:ce:d4:
a2:75:79:a5:9b:4e:37:6f:de:2e:34:93:b6:47:cd:
d7:b4:5d:38:ec:f7:39:a9:92:62:02:64:68:73:f6:
36:21:dd:cf:af:be:c8:47:61:cb:f3:f9:04:71:e5:
d1:b4:7f:18:19:d4:54:8d:da:50:f1:dd:93:33:f1:
04:14:2a:84:28:5a:1f:69:f3:29:9d:56:88:00:c6:
0d:c1:81:f4:6b:7d:1d:f4:d8:5c:59:be:bb:de:ef:
a1:a2:ab:6f:18:c8:f0:65:6d:68:75:0b:53:e5:ad:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138925
sbgp-ipAddrBlock: critical
IPv4:
103.137.72.0/22
IPv6:
2404:ac40::/32
Signature Algorithm: sha256WithRSAEncryption
5a:d2:4d:f7:70:c3:58:8b:b2:f2:28:61:7c:c9:fd:2d:17:89:
83:67:88:60:fc:85:02:b3:82:cf:83:8d:57:0c:42:c5:14:f8:
b1:fa:9b:5e:61:c8:38:11:3e:b7:8f:78:76:e0:c4:08:54:cd:
e5:f6:17:9a:ae:2e:7f:e5:a1:23:6b:c7:a2:c1:15:e9:50:3b:
3d:44:b1:a9:aa:d8:4c:9c:e3:2f:1e:c6:f0:0b:97:1a:38:72:
08:82:f4:48:8f:9f:7a:f4:6b:cf:5d:9f:88:9c:8f:12:ce:6a:
f5:59:eb:ca:65:c1:4a:d2:e6:e8:b7:0c:17:ab:7a:af:a8:e9:
53:eb:97:2b:39:ec:ad:46:00:b6:b7:66:96:0d:61:02:7e:30:
5f:7c:b5:49:ca:ab:cc:05:40:2e:bc:cd:66:3c:23:80:b9:b7:
48:ab:62:87:4b:34:26:55:e0:68:55:9f:ab:6e:66:6e:17:c7:
5d:b2:fa:0b:4c:a2:bf:8c:8c:18:75:0a:90:b7:4e:ac:fb:b3:
60:1f:57:c0:e2:cc:9d:72:75:fc:57:24:a0:62:74:0a:fe:1a:
57:17:c0:c5:0c:67:8b:c0:63:65:60:97:66:e2:8f:30:77:24:
9e:b1:63:38:da:3e:66:bb:40:9e:19:1c:99:8d:31:d9:0d:d2:
24:6d:28:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:41:26 2025 by rpki-client