Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer
File: s5MbVo8uudLtLKTWS-vAhvuduJo.cer (raw, json)
Hash identifier: Mz3EyzwCT2vUI+b267PB9LuDG9PQXnH6P/qerVUDwJQ=
Subject key identifier: B3:93:1B:56:8F:2E:B9:D2:ED:2C:A4:D6:4B:EB:C0:86:FB:9D:B8:9A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0231E4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 18 Feb 2025 16:04:50 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 132054
IP: 103.148.224.0/23
IP: 2001:df2:f280::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143844 (0x231e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 18 16:04:50 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91867F1, serialNumber=B3931B568F2EB9D2ED2CA4D64BEBC086FB9DB89A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:61:5d:92:68:05:d6:c3:a9:40:d4:a1:cc:
02:8a:98:f3:9b:42:55:b5:cb:fd:a2:e4:38:13:12:
e2:7e:6b:e5:40:cc:d4:78:d4:03:56:83:08:fb:f7:
81:5a:62:48:c4:b9:1d:a0:d3:e1:5a:df:be:fd:df:
23:91:e7:f8:7d:82:3c:31:22:d5:16:7e:42:84:b3:
3e:41:5a:1e:b9:a8:c4:d4:11:08:bc:d3:18:78:29:
bb:b7:ec:b7:58:da:68:3f:86:9c:27:96:52:9f:be:
99:7e:ab:40:e5:7b:dd:ed:a1:96:8a:c8:30:37:81:
66:67:bf:3d:51:94:d2:90:04:51:b2:73:38:17:7d:
4f:8a:60:32:1a:71:63:f6:4d:63:8f:e6:63:e4:5c:
31:0c:7a:d2:84:f3:a9:3e:05:bb:b6:8a:d8:19:c3:
7a:b6:c9:ac:e2:c2:b4:83:22:c2:37:6b:10:bc:d9:
32:2d:b9:12:0a:f9:0c:6e:5a:c3:e6:b1:a6:5b:80:
a0:c6:58:ed:83:cf:ad:ae:3c:11:2b:27:26:f6:5c:
9c:b1:b7:9a:f0:c7:b2:93:59:51:5e:a1:61:6a:f7:
65:c7:9e:c2:17:9c:ff:55:86:4c:e0:7e:bf:22:42:
8a:30:c9:70:ad:73:b9:f9:0d:0b:4e:ce:a6:fa:1b:
69:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:93:1B:56:8F:2E:B9:D2:ED:2C:A4:D6:4B:EB:C0:86:FB:9D:B8:9A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
132054
sbgp-ipAddrBlock: critical
IPv4:
103.148.224.0/23
IPv6:
2001:df2:f280::/48
Signature Algorithm: sha256WithRSAEncryption
0f:43:b8:11:8c:2a:ef:27:34:47:69:ea:67:85:84:0d:84:fa:
02:93:1a:44:b5:b8:3f:17:f4:c2:4c:5c:65:f9:b4:c0:2a:0a:
5e:2f:8a:18:70:c5:d7:28:cb:9c:68:84:79:fc:70:3c:ca:19:
62:39:71:5a:de:ea:bc:53:1f:e5:c1:6c:bd:89:58:2f:65:c0:
4d:1d:a6:f7:71:58:cc:ce:ec:e4:90:17:18:76:38:b9:65:b3:
0b:8e:db:0b:b0:a1:f7:fb:11:aa:c7:48:d4:84:27:86:80:85:
ac:df:42:29:f3:1c:ba:77:73:15:1d:4e:b1:8a:93:3e:ba:87:
49:17:1c:c8:d3:8b:7a:6d:eb:76:63:de:23:45:a2:be:19:b7:
7f:f6:ec:23:34:1f:46:02:ba:83:9a:60:dc:5f:39:84:2e:c8:
7e:a2:8c:4d:b2:87:1e:ad:a2:41:b6:fc:2d:db:f9:84:0f:fd:
d9:09:f1:87:15:be:b5:ab:7d:f1:64:c4:0d:91:f9:a6:e7:b4:
74:88:91:d9:94:44:75:27:23:fc:f4:2e:71:a4:bc:d9:dc:e5:
e0:72:f8:a2:ea:1c:fb:26:19:ea:0e:4e:63:5f:14:bb:6d:10:
68:14:ec:fc:7e:49:52:3c:96:11:b2:e9:a3:da:ad:88:79:16:
bb:7d:12:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:49:09 2025 by rpki-client