Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer
File: tg1afDY_D02TL-MXuQzmz4DSg8k.cer (raw, json)
Hash identifier: 4B+1lt2ikHbDZudGp7t/pUwGCfYDC5YMC5uZNCTKYhc=
Subject key identifier: B6:0D:5A:7C:36:3F:0F:4D:93:2F:E3:17:B9:0C:E6:CF:80:D2:83:C9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023C41
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 02 Apr 2025 13:09:04 +0000
Certificate not after: Fri 01 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 140042
IP: 103.147.200.0/23
IP: 2405:bfc0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146497 (0x23c41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 2 13:09:04 2025 GMT
Not After : Aug 1 00:00:00 2025 GMT
Subject: CN=A9118309, serialNumber=B60D5A7C363F0F4D932FE317B90CE6CF80D283C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:3d:76:28:c8:4c:4c:66:5a:66:89:78:ab:
0f:cb:78:dd:0c:e3:f3:85:5d:d4:8f:04:3d:44:24:
7c:99:44:31:ee:ad:78:ed:49:b7:c3:7c:2e:2f:88:
fc:2f:5a:0f:c6:92:59:79:14:37:d2:e9:53:93:13:
a2:7d:55:cb:04:c2:a5:a5:16:84:03:55:c7:62:48:
b3:81:93:f9:07:b3:58:f7:0e:0e:2e:59:78:5b:d2:
20:37:c7:43:85:0d:14:50:34:53:25:9b:c9:c3:9f:
e5:b5:b9:7c:49:c8:48:54:43:ec:7f:64:2e:38:05:
d7:90:ed:b1:a0:4e:74:b6:3e:b2:5f:74:7e:49:69:
c1:ee:47:b4:dd:63:fd:3c:f4:41:b6:fd:e8:82:ec:
ff:36:50:02:c4:0a:28:0e:ec:15:ac:d3:cd:19:f3:
a3:cb:f3:79:50:d6:d2:29:17:c8:c0:22:93:80:d9:
93:bb:63:53:7a:54:43:fd:eb:00:5b:b5:80:d2:52:
c8:23:2c:4e:22:85:ce:9c:6e:4c:85:60:fc:f1:ac:
05:cb:b8:82:44:87:9b:37:16:07:73:16:9d:db:2b:
c1:3c:39:ca:2b:c6:88:1b:64:79:6d:69:6b:10:53:
cb:da:67:14:bd:d4:79:f7:dd:81:c0:25:34:0c:40:
21:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0D:5A:7C:36:3F:0F:4D:93:2F:E3:17:B9:0C:E6:CF:80:D2:83:C9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140042
sbgp-ipAddrBlock: critical
IPv4:
103.147.200.0/23
IPv6:
2405:bfc0::/32
Signature Algorithm: sha256WithRSAEncryption
bc:7c:ff:0a:04:02:7a:e6:f9:08:b9:c6:56:71:82:0a:10:6f:
11:f7:8f:5f:19:70:f2:5b:e1:98:5f:b8:3b:38:10:58:73:f7:
01:22:11:90:d9:76:d8:e1:87:bc:68:f2:cc:46:8b:d8:c4:fb:
c2:90:ca:8a:f6:4a:02:fa:30:65:54:c4:5f:04:4c:cf:40:fe:
1a:cc:bf:bd:cc:41:c1:9e:be:0d:2d:36:24:ae:fb:50:19:c1:
08:7e:83:bc:3a:15:31:58:a8:cb:4e:d4:c5:ca:98:d6:7b:a6:
82:6e:bc:5c:13:c1:58:dc:79:28:cd:24:2d:ff:61:6c:78:62:
bf:33:c1:9c:00:31:14:58:ed:5f:a3:a3:5d:50:f3:34:13:a6:
9a:6f:10:34:b6:49:fb:18:db:54:34:ef:b0:2c:32:8f:2d:88:
b5:ea:62:fc:97:1b:cf:6c:b8:a4:97:b9:ff:17:f0:7b:ca:40:
59:5c:72:86:62:aa:8d:93:1a:fc:a2:a9:d6:8f:72:eb:3e:ca:
9a:18:58:0e:55:5c:00:9c:b4:aa:84:2b:1d:88:64:06:91:f2:
f1:f5:4a:56:70:97:ff:a0:5b:f1:b3:d4:75:5d:dc:e2:e6:0f:
b9:b5:d9:4e:f8:8e:b0:7f:20:b8:e7:9f:7f:dd:04:3e:bd:a2:
4b:f4:f4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:51:29 2025 by rpki-client