Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer
File: uHa2DaKzyctmxyu5_Kc77ssR_dE.cer (raw, json)
Hash identifier: GExIGFvh9ZS6aw2EB2GWoW8U60j5YXU50nOChnHBY64=
Subject key identifier: B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023E96
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 11 Apr 2025 12:46:21 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 138664
IP: 103.135.252.0/22
IP: 2404:88c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147094 (0x23e96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 11 12:46:21 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A912611F, serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1b:20:3c:24:c4:dc:eb:a6:81:20:0b:f3:9c:
d9:02:55:b6:5f:67:96:75:38:c2:63:f6:e6:c9:16:
60:01:aa:84:78:c2:99:54:15:91:38:7b:c2:43:9d:
38:dd:dd:40:0c:c7:13:8f:1a:9a:79:2b:52:09:8f:
48:f7:f0:65:71:57:7e:93:63:0e:d4:b8:07:30:75:
5a:e0:67:d9:41:af:a1:2f:10:5d:ea:8f:ac:5c:fb:
f0:3e:73:5b:d0:fa:6b:39:79:08:fd:d5:54:16:18:
05:6b:28:41:0e:3a:ba:35:5f:b7:7a:e3:df:c5:a7:
26:ad:cf:60:f8:2b:6a:d3:18:ab:7f:a5:e0:3f:03:
e4:4b:e1:f2:50:c3:73:88:a8:7d:b4:e1:3f:95:a8:
82:02:31:bd:9b:f6:8f:38:69:87:3a:9c:23:6f:6c:
f9:66:e6:84:4b:f7:c7:1c:7f:c2:f6:3c:f5:fe:d2:
45:da:cd:3a:83:28:a6:05:16:2c:82:a5:a0:8a:c2:
9d:12:d6:26:d5:bb:94:96:47:e6:30:7b:35:64:e9:
12:17:e2:5d:0d:0f:90:0d:ed:be:54:a9:c3:f1:97:
a2:1e:34:e1:de:f4:a4:02:ab:13:d0:a2:10:ae:44:
55:bf:58:74:bf:b4:73:51:c4:fa:f5:67:46:c8:95:
e5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138664
sbgp-ipAddrBlock: critical
IPv4:
103.135.252.0/22
IPv6:
2404:88c0::/32
Signature Algorithm: sha256WithRSAEncryption
44:cd:93:46:06:98:fc:d1:d3:dc:f9:b8:1f:7e:60:af:5c:32:
1b:08:04:3f:f0:0d:bf:ac:db:89:ae:aa:46:5a:42:04:80:91:
98:fc:9b:2e:55:d2:b7:87:41:56:ed:1a:ba:15:3a:17:80:96:
5c:bb:c4:ff:45:1f:dc:fd:12:3b:52:5a:db:0e:4e:5d:11:38:
30:5e:4e:97:78:f2:de:87:d0:bb:0e:28:d1:db:1b:26:5e:c1:
b0:c0:30:5e:76:ea:c4:3e:22:07:6c:03:a3:92:5e:33:7b:5e:
59:36:02:76:3f:9f:b2:d9:d4:da:9f:38:2e:18:e2:f1:72:92:
b1:04:8c:f1:98:53:70:43:76:db:2c:7d:29:1d:ae:83:b1:23:
1c:d1:f9:d7:14:7d:f7:d8:f4:1b:e9:c1:2e:e4:4f:61:a0:57:
62:ee:49:3c:68:a3:27:e1:82:29:2e:83:96:c8:e9:90:19:79:
82:28:58:4f:97:22:19:8a:67:17:6b:65:c2:ef:a5:c5:74:23:
36:89:a7:0d:dc:58:b9:c2:39:38:9c:a3:28:a9:28:42:9b:82:
78:a3:19:c5:be:0a:e7:4d:76:df:57:bf:b5:5e:e0:2b:96:8d:
e4:94:35:10:8b:48:46:63:ac:25:5a:72:a2:93:67:57:20:99:
10:93:aa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:55:10 2025 by rpki-client