Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPut8cC1pCW10h189FxAyqRO3OE.cer
File: KPut8cC1pCW10h189FxAyqRO3OE.cer (raw, json)
Hash identifier: 1JkPfsSvwPsvl5wffq7skV1cmH0z8doBW01KV7Bu0SY=
Subject key identifier: 28:FB:AD:F1:C0:B5:A4:25:B5:D2:1D:7C:F4:5C:40:CA:A4:4E:DC:E1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024292
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 30 Apr 2025 05:16:14 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: AS: 133429
AS: 136608
IP: 103.93.232.0/22
IP: 2401:31c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 May 2025 18:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148114 (0x24292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 30 05:16:14 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A9136AF7, serialNumber=28FBADF1C0B5A425B5D21D7CF45C40CAA44EDCE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f0:75:9d:9e:4d:1a:86:85:44:17:04:11:56:
98:5d:9b:97:e0:38:e6:23:36:c1:30:e3:e4:60:57:
c3:4a:98:b9:a3:24:83:7e:5e:f0:40:3b:3a:83:ba:
f5:01:2b:d1:38:98:4c:b0:85:e0:55:4a:76:e7:70:
8b:23:42:23:9e:4e:dc:1a:b0:97:ea:e3:56:d1:1d:
7c:43:57:b0:f3:5f:60:50:be:e6:df:5d:0f:d8:d4:
6b:69:89:ac:77:e5:bc:9e:27:e0:9d:62:0a:d6:32:
04:38:84:dc:7c:db:95:cc:2a:16:d5:d4:e6:bb:02:
cb:02:fb:11:17:a0:3a:5f:3c:c4:37:9a:c8:4c:35:
8e:b0:16:88:55:74:b2:83:aa:bc:e8:0a:f6:b2:a9:
15:b1:98:c1:6a:e5:e7:1c:cd:ff:ca:b7:3f:6b:39:
c8:2a:f8:06:a8:f5:a8:cc:18:d0:22:a8:d6:f8:41:
52:74:f3:8f:c5:0c:c6:54:73:ca:bb:5a:23:e8:74:
81:34:29:a4:95:b9:bd:78:bd:01:1e:9f:cb:4c:16:
19:c6:56:cb:09:02:b9:88:57:0c:4a:4a:91:62:58:
db:2d:8e:e4:93:ba:d7:43:eb:44:1d:93:8f:6f:3f:
23:af:18:b0:34:00:e2:86:0a:a3:a9:21:97:13:ab:
bd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FB:AD:F1:C0:B5:A4:25:B5:D2:1D:7C:F4:5C:40:CA:A4:4E:DC:E1
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9136AF7/7B0B6F72F27311E9AE257640C4F9AE02/KPut8cC1pCW10h189FxAyqRO3OE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133429
136608
sbgp-ipAddrBlock: critical
IPv4:
103.93.232.0/22
IPv6:
2401:31c0::/32
Signature Algorithm: sha256WithRSAEncryption
51:40:79:ab:e9:63:68:3d:35:be:33:fc:30:3d:33:4d:47:cf:
2d:34:83:9a:0a:4c:6a:a4:c7:59:be:3f:d8:ce:ea:ec:cc:5b:
ba:c5:04:6e:58:23:97:71:31:5a:33:19:df:72:ef:3b:57:38:
3b:7a:70:1e:9d:8b:ed:e3:e6:2f:0e:9a:50:45:3a:96:8b:1a:
30:e9:f8:bb:6f:12:b9:e6:db:da:0c:ef:6a:4d:dc:fd:a9:87:
10:34:66:b2:1d:02:e6:82:cd:f6:69:6c:a1:7a:25:81:54:b2:
49:76:f0:5f:f2:b1:07:79:c4:21:14:7b:25:cd:09:b2:ec:be:
36:8a:e4:6b:ef:cd:f2:90:9f:e5:80:d8:5b:7f:89:d5:0b:3f:
4f:a3:65:29:9a:14:13:bb:5c:ac:e1:20:7b:64:60:b6:61:4f:
73:d5:03:86:64:3b:4f:ef:c1:56:34:ef:37:a7:90:5d:52:f2:
35:70:92:e4:93:fe:7c:80:91:30:c0:a5:44:4c:b8:d5:ba:36:
8e:9c:6b:a3:26:6d:53:b1:54:4a:7b:81:1f:19:7f:ff:cf:7f:
3b:c4:f8:da:55:d2:52:0c:20:ce:33:b6:64:8e:a5:9b:38:bb:
e3:13:6e:24:ec:91:1c:2b:34:30:bc:d1:e6:11:d6:9e:c1:53:
b7:14:bb:15
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIDAkKSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MDQzMDA1MTYxNFoXDTI1MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxMzZBRjcxMTAvBgNVBAUTKDI4RkJBREYxQzBCNUE0MjVCNUQyMUQ3
Q0Y0NUM0MENBQTQ0RURDRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDH8HWdnk0ahoVEFwQRVphdm5fgOOYjNsEw4+RgV8NKmLmjJIN+XvBAOzqDuvUB
K9E4mEywheBVSnbncIsjQiOeTtwasJfq41bRHXxDV7DzX2BQvubfXQ/Y1Gtpiax3
5byeJ+CdYgrWMgQ4hNx825XMKhbV1Oa7AssC+xEXoDpfPMQ3mshMNY6wFohVdLKD
qrzoCvayqRWxmMFq5ecczf/Ktz9rOcgq+Aao9ajMGNAiqNb4QVJ084/FDMZUc8q7
WiPodIE0KaSVub14vQEen8tMFhnGVssJArmIVwxKSpFiWNstjuSTutdD60Qdk49v
PyOvGLA0AOKGCqOpIZcTq729AgMBAAGjggMjMIIDHzAdBgNVHQ4EFgQUKPut8cC1
pCW10h189FxAyqRO3OEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTM2QUY3LzdCMEI2RjcyRjI3MzExRTlBRTI1NzY0MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTEzNkFGNy83QjBCNkY3MkYyNzMxMUU5QUUyNTc2NDBDNEY5QUUwMi9LUHV0OGND
MXBDVzEwaDE4OUZ4QXlxUk8zT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAgk1AgMCFaAwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJnXegw
DQQCAAIwBwMFACQBMcAwDQYJKoZIhvcNAQELBQADggEBAFFAeavpY2g9Nb4z/DA9
M01Hzy00g5oKTGqkx1m+P9jO6uzMW7rFBG5YI5dxMVozGd9y7ztXODt6cB6di+3j
5i8OmlBFOpaLGjDp+LtvErnm29oM72pN3P2phxA0ZrIdAuaCzfZpbKF6JYFUskl2
8F/ysQd5xCEUeyXNCbLsvjaK5GvvzfKQn+WA2Ft/idULP0+jZSmaFBO7XKzhIHtk
YLZhT3PVA4ZkO0/vwVY07zenkF1S8jVwkuST/nyAkTDApURMuNW6No6ca6MmbVOx
VEp7gR8Zf//PfzvE+NpV0lIMIM4ztmSOpZs4u+MTbiTskRwrNDC80eYR1p7BU7cU
uxU=
-----END CERTIFICATE-----
Generated at Sun May 4 22:32:07 2025 by rpki-client