Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
File: r7CNb36XeFtvMRce-C4xux0G4uM.cer (raw, json)
Hash identifier: hua1TvDemefiYcKHo5u4LVx2wQlWx5pVT0PqBnJmf6k=
Subject key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023F33
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 15 Apr 2025 19:23:48 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 37988
IP: 103.108.228.0/22
IP: 2402:7340::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147251 (0x23f33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 15 19:23:48 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:19:a9:d2:e0:6d:ae:f0:fa:d5:f5:e4:42:
37:61:64:22:1b:ae:a9:9a:8a:a7:f1:5c:d1:b0:58:
e5:ed:e8:c4:f6:a2:2c:cd:94:78:c3:f0:86:26:54:
ae:ba:1d:e2:c6:b3:46:13:13:f0:71:3f:10:f1:e1:
e9:18:7c:9b:74:5b:d9:00:07:41:d4:02:c5:24:e0:
34:06:cb:8f:45:fd:3c:54:a0:2d:bb:9d:77:29:10:
9f:4a:a7:5d:8b:27:6c:6b:ba:e8:85:4f:5a:bc:27:
8f:a5:68:eb:8d:ea:fc:43:36:21:eb:ad:46:ce:da:
72:0e:34:fa:6f:83:9a:58:37:2d:94:2a:e1:c4:24:
1e:be:76:9a:e8:91:58:b8:c0:49:13:0e:f3:e8:24:
41:a5:8e:3c:70:90:cf:ed:15:bf:b0:5e:db:a0:bd:
56:8d:64:e4:bd:4b:cd:80:d6:e1:54:4e:4f:49:4d:
d6:46:2d:0a:8c:a1:ff:9e:83:1c:6c:e7:8f:e7:7d:
85:ff:4a:c3:22:2e:b7:b3:1e:cb:bb:bc:6c:8c:84:
44:a7:51:88:e3:44:31:78:4c:7b:d5:9a:f6:68:f2:
28:48:5f:e6:31:08:b0:69:be:5d:2d:ea:1e:e9:84:
3c:7e:e1:30:80:68:d8:34:ef:b9:14:59:e4:16:c6:
d9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37988
sbgp-ipAddrBlock: critical
IPv4:
103.108.228.0/22
IPv6:
2402:7340::/32
Signature Algorithm: sha256WithRSAEncryption
af:c6:52:b3:c1:96:2d:a4:23:43:da:03:ae:7f:2b:9f:ec:73:
91:0c:7a:18:91:bd:9f:d4:bb:d3:19:fc:42:02:3f:50:8e:c5:
52:79:14:a5:78:ba:0b:ab:d9:49:fc:86:04:d7:b7:6f:9f:09:
98:cf:d9:15:91:c3:24:2b:7a:19:c9:ae:e8:0c:31:4c:4d:68:
66:d2:f3:0b:e1:ec:87:3c:0e:48:6e:33:46:ae:1c:ba:a6:d0:
e6:0b:0d:43:00:08:73:f6:f7:35:83:ce:18:01:b7:47:14:c1:
cf:77:34:d3:f0:18:c7:00:ac:af:a9:3a:93:96:c8:25:74:62:
68:95:46:a8:f7:38:53:bf:e2:d3:ef:7a:d7:4c:9b:71:b3:02:
84:7e:1d:bc:3e:99:52:c6:c7:46:7d:41:b8:ee:c0:a2:15:50:
db:8a:b5:72:e1:47:44:d6:e0:03:da:1c:cd:59:61:ff:41:38:
15:3e:7b:af:aa:fd:13:4e:c4:f2:8f:51:bd:5d:91:b5:92:b1:
dc:35:51:f3:db:eb:7c:ff:c8:6e:53:a0:48:54:40:5e:7c:aa:
30:0b:fe:11:5a:e7:9e:e6:cc:ae:c0:61:a3:07:e8:3f:30:78:
50:90:3b:a0:05:7a:b6:f9:96:c6:43:b2:4f:78:61:50:ca:5a:
43:3c:38:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:44:37 2025 by rpki-client