Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
File: x8kdlvp-jS2SIZUipkBEI3UR4FE.cer (raw, json)
Hash identifier: ewgSjObUtA5WWFGWs5IavKn/dh4uOq2yy7wWUpkTtoM=
Subject key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023F07
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 14 Apr 2025 21:48:57 +0000
Certificate not after: Thu 28 May 2026 00:00:00 +0000
Subordinate resources: AS: 149514
IP: 103.181.162.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147207 (0x23f07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 14 21:48:57 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:f2:41:bd:a0:5e:26:92:f8:71:c4:46:fe:
97:70:c5:b4:82:28:fb:b9:bd:95:a3:56:10:c4:43:
f7:60:30:c8:25:87:a4:6f:e8:92:cc:03:da:b4:3f:
32:cc:bd:1a:22:e0:1b:d9:c1:42:b9:fb:50:c9:e6:
cb:60:72:a4:ea:e0:08:fa:c2:81:6e:6c:a2:90:87:
c3:f6:0c:4d:85:cd:d9:0a:cd:e8:c0:a3:e9:29:0d:
5d:ef:0d:6d:41:1b:5f:25:dc:ef:e8:da:37:4e:5a:
13:35:5f:9e:e9:bc:e2:54:cf:26:d7:21:3a:2e:02:
90:c6:25:9d:6b:bd:ef:e1:15:81:19:2a:be:10:a8:
13:21:b7:5b:d9:38:0b:a8:14:ff:f9:ce:92:ed:e0:
81:45:7f:43:38:cf:59:81:25:c4:b6:40:7b:18:5a:
d7:24:19:dd:1a:75:f6:5f:4a:a6:f6:ea:db:f4:a5:
41:f7:b4:94:91:91:d4:fb:39:0e:d9:76:a2:ea:a2:
e5:aa:23:bf:fe:af:19:1e:dc:0c:ee:e8:0a:1b:e5:
12:8d:38:10:ff:68:17:00:eb:f1:a9:8e:8d:37:1a:
d0:7a:b5:c0:a2:47:17:fa:6e:7e:16:30:76:4a:3f:
17:31:75:c4:6a:d9:17:05:4d:19:ff:51:52:30:a7:
59:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
149514
sbgp-ipAddrBlock: critical
IPv4:
103.181.162.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:93:24:53:ff:b0:b6:c5:68:78:37:b8:40:68:ed:23:68:f7:
7e:6e:86:ad:88:3c:29:ba:03:0a:fd:b1:44:63:96:02:45:b4:
95:a7:95:62:4f:6e:72:d3:3a:08:ce:53:3e:cb:70:de:ce:f1:
81:a8:2b:f1:67:ce:57:57:05:33:28:e5:1a:07:21:7d:17:d5:
1d:8f:f1:5c:4d:70:2b:38:d3:f8:29:20:97:55:8a:b7:c0:7c:
42:d7:98:cf:f5:1e:3c:c2:81:65:61:92:8c:71:0e:6b:45:b8:
93:fb:14:29:49:41:24:f9:02:e0:21:f8:54:8c:63:26:83:e6:
7f:20:6a:83:c8:c1:46:1d:5e:da:05:58:86:57:dc:05:94:db:
67:67:66:68:98:a6:32:ac:a0:db:be:72:eb:ee:e0:89:ad:2a:
f8:29:76:36:95:eb:4e:52:9b:fc:dd:95:d0:1c:05:1a:a9:fa:
f5:e2:c8:22:1b:cd:f1:eb:2a:4b:e9:c0:f2:0b:06:54:80:ce:
ba:aa:bd:cb:ae:5a:d4:42:2f:24:cf:cf:5a:90:89:eb:60:b0:
3a:82:d5:44:b8:60:7b:aa:fd:79:cd:6e:65:32:2f:f6:e0:1b:
82:21:60:2d:72:1b:1b:40:8f:bb:a5:17:9d:a1:91:76:e6:d4:
4f:69:4c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:44:49 2025 by rpki-client