Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
File: khLuorkaMmYPdScf7IWJswnDifA.cer (raw, json)
Hash identifier: 9znFyt0AS+x473Lw3RtRFPT1XTNnAiTQXIKM6aqyXv0=
Subject key identifier: 92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023556
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 04 Mar 2025 18:41:58 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: AS: 149761
IP: 103.162.26.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144726 (0x23556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 4 18:41:58 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91999F5, serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:07:26:11:fd:30:e4:f6:b9:ea:fc:8f:3d:
d5:ec:6c:e3:40:ff:d5:d7:94:60:0d:d9:fb:35:ab:
a1:af:a0:1f:ad:47:e8:1a:d6:f8:cb:e8:c5:b7:88:
42:a5:70:34:02:61:92:b4:57:7e:b6:17:73:7a:12:
54:ad:ea:88:f0:bc:3a:a4:36:91:4a:41:ed:e5:4c:
b9:25:40:8c:f4:8e:e3:08:19:e1:a2:78:af:81:23:
fa:a0:fb:1a:1e:3c:d9:81:9f:86:d0:63:a7:56:8d:
a2:1f:f1:f5:55:ef:28:81:9f:ef:0a:61:e3:ae:c7:
12:00:f0:2e:db:88:23:e1:15:9a:dd:d8:e1:d7:10:
e9:c7:f3:71:b1:4e:70:11:cd:1f:38:1d:f0:97:f8:
26:a3:16:a3:99:51:58:df:0f:10:dd:9a:7f:a8:e3:
60:49:24:74:10:cd:a6:26:70:39:46:ac:bf:57:9b:
a5:bb:65:c2:7c:09:b6:d1:75:39:18:35:2e:b9:49:
09:11:ab:23:b9:e5:c0:8e:d8:89:43:28:12:c4:77:
c5:76:0c:31:06:b2:4c:97:91:4d:a8:51:20:05:41:
8f:ca:91:36:f8:00:83:a6:67:f7:f2:ae:2f:13:d2:
e3:8d:d8:2a:ed:08:65:1a:b0:d9:23:a4:31:58:94:
20:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149761
sbgp-ipAddrBlock: critical
IPv4:
103.162.26.0/23
Signature Algorithm: sha256WithRSAEncryption
47:ad:63:df:88:e4:05:ce:ea:1a:5b:b1:1b:fd:9a:4e:0d:4d:
9d:7a:6d:36:29:f3:a2:97:84:41:bc:ff:39:7e:94:13:e9:82:
2e:09:5c:a2:c3:d1:97:26:f6:1c:b1:3e:35:eb:fd:c9:54:09:
e6:49:10:ce:d9:30:f2:57:d2:5c:e2:d1:d3:9d:80:16:44:8d:
c2:06:13:85:70:8e:84:1b:92:1f:5f:93:c8:2f:e7:9a:e8:56:
b6:d3:38:08:26:7a:46:20:44:7d:3b:c2:42:18:64:cc:c8:12:
e9:40:ce:f2:b1:fa:3a:22:e9:93:2a:a1:f2:ed:e9:3a:10:73:
41:1a:eb:a9:bf:b1:ac:af:a8:ae:d0:a9:28:34:5e:d2:ac:b6:
dc:02:5c:f0:66:53:a7:c1:1b:50:14:64:97:b9:a9:67:68:24:
57:c2:d4:c3:93:6a:d6:6b:87:18:b7:73:13:00:91:d4:d1:31:
7a:19:28:56:65:9f:fb:06:12:5e:5b:69:27:db:d6:b8:8f:27:
9a:07:cd:9f:e1:7a:23:c8:62:69:02:e4:07:e7:83:9a:15:bf:
58:da:01:c8:66:94:d7:90:b0:90:c7:4d:32:05:74:cb:c6:40:
4d:c2:d1:90:73:b3:a5:27:20:ac:f2:e1:d7:82:21:e5:2e:68:
48:8e:35:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:43:12 2025 by rpki-client