Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
File: bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer (raw, json)
Hash identifier: GJwRGs/03fY0v3oaFpo7dPNwqbQA6O9nTVVJZZ98Lz0=
Subject key identifier: 6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023CF5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 04 Apr 2025 14:25:03 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 38175
AS: 38194
AS: 38206
AS: 38208
AS: 133086
AS: 138009
IP: 103.10.57.0/24
IP: 103.119.232.0/22
IP: 103.163.20.0/24
IP: 2001:deb:c000::/47
IP: 2403:4ac0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146677 (0x23cf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 4 14:25:03 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A9148F80, serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:3c:37:7c:a0:ac:11:fb:09:26:72:05:a1:
c5:47:11:da:31:11:9b:89:59:b0:2f:61:0e:26:3d:
52:e3:b6:5c:f4:57:a6:34:6a:96:7f:19:ae:97:a4:
35:77:c9:67:69:03:83:98:b0:0b:9d:06:52:88:b5:
04:62:e2:1b:9b:77:8c:7b:12:b2:03:9f:d9:47:a1:
6b:12:92:2b:39:db:02:0a:f8:72:27:52:34:48:76:
62:4c:8a:4e:db:8d:21:ab:37:85:cd:a9:3e:fa:4c:
58:a7:80:fc:28:5a:ec:12:3d:9e:fa:8b:69:bd:7e:
68:c9:8a:18:fc:f3:5e:2f:88:4a:4d:00:f2:00:e6:
e7:de:15:c5:76:97:f4:24:a8:bb:64:d7:e7:8b:73:
dd:8e:76:74:f0:dd:ca:a0:2e:20:be:fa:49:0a:7e:
bc:64:0a:16:cd:46:84:2e:b6:3c:4a:6c:e1:cc:26:
59:30:76:2b:c1:15:6e:f5:c3:e2:ef:78:b0:db:41:
20:a6:e1:4c:55:7c:93:da:19:d6:9f:da:bc:66:f7:
fa:4e:ab:2a:2f:1e:ea:2f:b3:51:1b:f7:13:29:c9:
6e:f7:a6:dc:b7:8e:e7:a6:06:2f:2b:a6:38:db:c1:
89:75:32:a9:76:df:5b:0e:b0:5e:cb:0b:74:7e:66:
11:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38175
38194
38206
38208
133086
138009
sbgp-ipAddrBlock: critical
IPv4:
103.10.57.0/24
103.119.232.0/22
103.163.20.0/24
IPv6:
2001:deb:c000::/47
2403:4ac0::/32
Signature Algorithm: sha256WithRSAEncryption
28:3d:06:87:c3:01:c7:6d:99:f2:c2:66:12:80:b5:eb:2f:01:
2d:8e:40:13:8e:ad:b9:fe:bc:50:4e:76:30:cf:51:22:42:e1:
75:9d:9e:2b:ac:14:1e:02:af:bb:0d:54:1b:51:f3:d7:06:5f:
a3:ea:3c:00:03:79:a8:df:5c:2d:ee:8d:9e:5f:62:c1:d9:54:
e6:80:28:93:45:60:1c:6e:48:66:a7:15:d1:b4:a2:01:73:ef:
dc:8c:76:6e:2a:fc:75:83:57:4d:b5:72:b0:45:c3:4e:b2:e0:
7a:87:11:a3:cc:f2:8b:05:33:e9:77:ca:66:89:98:32:c1:cd:
16:6d:49:24:5d:86:98:c4:5f:6c:dc:47:4c:ea:57:3d:5d:f3:
56:aa:28:71:8d:5b:d3:00:0b:89:8e:d5:89:07:03:ca:34:04:
e4:1a:dc:13:f6:14:81:07:06:88:21:e4:2a:54:ad:fc:02:77:
9a:41:39:fb:43:7f:93:85:56:35:4e:66:39:96:6c:40:71:d8:
59:ee:87:d1:47:53:65:ad:34:55:8b:b1:32:47:89:1e:62:82:
98:a9:d6:3a:d4:87:a0:c4:d5:a0:b5:eb:72:35:0d:80:13:8f:
91:42:26:7d:b7:f5:6e:03:63:23:01:f4:8e:83:0a:da:5e:2b:
cb:27:62:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:49:02 2025 by rpki-client