Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer
File: fSGgNfHk9MpCeHMKwuUHXbIxG08.cer (raw, json)
Hash identifier: CUGV8w0xgG40KSTczQVcsyMtNCcuX+SLBSvY9QIvtUQ=
Subject key identifier: 7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023CC4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 03 Apr 2025 15:24:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 10111
AS: 133790
IP: 103.149.181.0/24
IP: 2001:df3:3a80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146628 (0x23cc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 3 15:24:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A916B826, serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:6a:bb:69:81:01:19:e3:4c:03:eb:e7:ac:
11:09:3b:bb:39:a6:56:54:9c:5c:7f:59:fe:06:a2:
5d:fe:3b:48:db:04:e9:13:ec:4b:73:0c:ea:f0:5c:
08:59:cc:f1:5d:0b:32:a9:94:0a:13:f6:08:79:5d:
11:21:7d:a4:e6:a5:1f:ae:2a:c8:70:cb:76:bf:84:
91:7f:09:28:19:4f:18:05:38:9d:5f:f9:49:ad:82:
8b:3f:5b:ea:1f:37:f0:c3:84:e9:a1:d5:2b:f3:d8:
b0:aa:17:d3:b0:ac:69:80:93:e2:b4:80:ef:1c:46:
94:b1:74:49:3a:e4:c6:4a:78:fa:ac:fd:75:b0:79:
cd:bc:8e:db:6a:72:c2:df:3e:c3:bf:a6:dd:51:e9:
17:11:b4:4e:2a:a3:19:27:af:5f:36:8e:0b:8f:f8:
e1:91:3f:d3:2b:85:c3:88:a9:a7:2d:f5:53:70:1e:
00:02:1c:71:d7:24:08:b2:cb:41:5a:3e:97:db:69:
ce:62:fd:05:a1:e3:fc:30:e0:53:65:10:34:44:fa:
93:45:17:29:29:dc:fa:b8:4b:c4:94:18:2d:51:e7:
62:0e:64:40:4d:b0:aa:db:73:43:7e:e3:6b:19:4d:
b1:89:9e:8a:80:87:56:f8:26:32:c5:a0:07:04:10:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10111
133790
sbgp-ipAddrBlock: critical
IPv4:
103.149.181.0/24
IPv6:
2001:df3:3a80::/48
Signature Algorithm: sha256WithRSAEncryption
b8:17:cf:80:d3:21:eb:3b:f2:51:11:b9:86:6d:c8:77:c6:bd:
a1:42:fb:f6:fb:b9:ca:b3:5e:b9:8c:3c:00:06:ce:a8:58:a4:
e8:b4:66:2d:7d:15:a9:4b:2c:89:d4:d4:6a:a8:2f:a4:94:1e:
d5:2a:74:9b:fa:93:3c:ba:62:ee:32:ab:77:31:c3:5c:fe:8f:
f2:a5:c4:b0:ef:2e:81:62:8f:5c:97:bd:b6:38:c3:63:08:69:
8c:a0:59:43:2f:68:57:d9:70:37:8e:51:4f:01:e8:8b:5d:37:
8c:ca:a6:b1:57:c9:49:b8:6c:37:a2:64:92:94:e3:95:83:d8:
30:41:55:88:7b:7c:7e:c5:96:72:b6:80:b5:ae:74:bf:66:5a:
50:e5:25:59:e4:c3:f3:35:8b:6c:fe:8e:b3:2c:ab:9f:07:fc:
5e:40:8e:85:f4:b5:0a:4f:91:8d:99:6b:9d:ba:0b:7b:ad:58:
c2:fa:96:ca:68:2e:62:d3:80:ba:24:16:26:2d:ee:04:83:52:
e1:d1:de:44:75:e4:55:01:c7:28:ac:a3:0b:e0:b6:0a:15:b1:
30:a3:52:46:e0:ca:14:99:3c:da:90:19:07:60:d2:b8:9f:d8:
5a:8f:b1:02:e5:92:24:72:fc:06:52:cf:2b:3b:6e:66:23:42:
b1:5e:3b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:59:01 2025 by rpki-client