Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer
File: yyTPMxKhYnFYzDraiI5bywxnzqE.cer (raw, json)
Hash identifier: fWO9gn37fYWw/TGhrXXIMBHQXqdvhsH0nMJm61UPBPM=
Subject key identifier: CB:24:CF:33:12:A1:62:71:58:CC:3A:DA:88:8E:5B:CB:0C:67:CE:A1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02392E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 24 Mar 2025 12:42:21 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 140603
IP: 203.24.61.0/24
IP: 2001:df3:8f80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 20:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145710 (0x2392e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Mar 24 12:42:21 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A9122342, serialNumber=CB24CF3312A1627158CC3ADA888E5BCB0C67CEA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:df:a0:d2:53:7c:e8:f8:e7:4b:1b:27:38:
1c:51:3c:a8:c0:ad:ab:4a:58:8b:85:33:16:92:28:
03:3d:7b:bf:f7:90:00:44:5d:8d:60:81:59:37:cc:
bd:2b:2b:8a:32:ad:c0:8e:6d:13:3e:5a:9b:0d:c8:
3b:1a:f1:b6:cc:93:77:03:34:2f:65:7b:3d:61:7a:
a4:61:b8:d7:30:5a:be:2d:1e:0f:fa:39:cd:81:30:
bd:22:78:c8:d1:a6:6b:cd:cf:25:a5:2b:81:5d:b5:
4e:8a:ae:53:90:51:0f:2e:81:b7:c7:87:63:2a:e3:
f3:bc:f3:52:66:66:d4:4a:3b:2e:25:b7:c9:f2:27:
64:85:d1:73:94:5d:cd:ae:49:e7:d3:ca:a4:89:71:
79:cd:84:fc:e5:0e:c8:94:5e:b1:51:1b:57:45:1b:
8b:21:80:9e:67:ea:03:51:fb:6f:66:be:a9:be:25:
fa:44:23:ea:78:2a:ec:6b:c9:d8:d4:63:d1:54:4c:
24:6a:d5:18:c2:2a:4c:bf:ed:08:31:b7:c4:9e:b8:
4f:ad:1e:81:84:c2:b8:e3:2e:a5:ab:3b:79:4a:7d:
0f:18:0f:ee:bb:db:b7:1e:23:7c:4a:72:2c:8c:0d:
88:17:6d:6d:12:e1:6e:32:50:6b:7c:89:fc:8c:d3:
62:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:24:CF:33:12:A1:62:71:58:CC:3A:DA:88:8E:5B:CB:0C:67:CE:A1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
140603
sbgp-ipAddrBlock: critical
IPv4:
203.24.61.0/24
IPv6:
2001:df3:8f80::/48
Signature Algorithm: sha256WithRSAEncryption
b1:10:e5:85:3e:cb:db:38:12:17:22:5e:3c:ca:e2:be:d5:4b:
50:2d:ff:cb:a5:6d:99:67:ab:1d:81:97:89:49:c2:2d:a1:68:
39:47:69:0d:2a:eb:a3:b4:59:a8:25:23:a4:27:36:c1:a9:3f:
ac:85:c0:35:24:3a:19:7f:5b:a8:b7:d0:f0:0a:b8:98:9d:72:
7e:f2:6f:11:d6:22:71:af:f3:d4:52:c1:8a:86:f4:e5:13:bb:
12:3a:7a:9f:24:26:79:dc:d9:1b:0b:c7:46:aa:c8:6b:0e:35:
ee:f9:74:c2:2e:a7:6e:3b:0f:10:43:3d:6a:0b:05:3b:fe:53:
63:c3:59:d2:d0:b4:81:28:56:05:f4:7c:ae:cb:88:16:4d:41:
0d:7b:99:86:3b:24:bb:23:11:74:d7:e1:a1:ad:9b:13:14:e3:
88:65:5b:ca:97:0f:32:48:94:b8:d1:85:3f:1b:0d:8f:69:c2:
91:2f:2d:57:c8:18:6a:ef:db:06:06:ea:58:d2:9b:8e:b6:44:
1d:08:84:66:f0:e2:66:78:37:06:ab:95:df:29:99:bf:67:1a:
84:29:16:18:ce:d7:7f:f2:fc:7e:e1:c8:32:a8:e7:88:5d:ba:
35:82:a8:44:c7:00:22:60:83:20:5a:87:a5:d4:c9:a3:90:8c:
aa:96:5f:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:01:21 2025 by rpki-client