Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
File: PusZaI0z1iGZTls9nkbsqqUJ9CM.cer (raw, json)
Hash identifier: 9DlidMBwv3x+sqLbO2faETSwZK2wL2N4SVRdVuIZsp8=
Subject key identifier: 3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02456D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 09 May 2025 23:37:12 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 58617
IP: 103.9.23.0/24
IP: 163.61.154.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 May 2025 22:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148845 (0x2456d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 9 23:37:12 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A91DE4AC, serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:7b:3d:b3:30:22:94:3b:25:e2:4f:92:c2:
55:6e:54:fb:b5:65:70:26:a5:44:04:b3:5c:9c:19:
04:f6:f8:21:32:8c:6f:4c:75:5c:64:43:49:ff:f0:
42:59:11:94:ba:14:3d:32:5e:17:5e:92:1c:c5:39:
59:64:6c:f4:3d:30:fb:79:fc:1d:c5:85:b9:e9:21:
ec:94:83:28:fc:94:3a:75:44:72:76:50:bc:cb:c2:
bf:91:cf:94:78:5b:27:95:18:6b:7c:cb:ba:2b:f1:
70:23:24:06:7e:b3:17:3c:54:fe:18:36:c1:b6:8c:
6a:f6:a0:33:9b:46:4f:15:bf:58:2a:da:c3:32:17:
d1:b7:46:04:1e:f0:17:d3:b6:09:08:51:03:ba:53:
09:77:bf:88:77:c0:84:97:40:be:b8:78:74:c6:53:
50:b2:51:dd:20:af:de:55:d9:f0:00:09:c3:76:c7:
24:c3:3b:ba:05:52:09:57:aa:7b:40:2c:31:be:f0:
a2:b7:99:19:c9:a9:df:e9:e7:00:76:c2:5a:75:20:
75:25:37:f7:10:96:38:ac:b3:c5:0c:ba:02:68:f2:
f3:d4:03:44:f5:1a:37:21:d8:de:7e:b0:c3:4b:08:
de:58:b0:1e:9f:d5:0d:94:ee:7b:02:ad:93:de:87:
5f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58617
sbgp-ipAddrBlock: critical
IPv4:
103.9.23.0/24
163.61.154.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:8c:d1:c9:09:65:4f:b4:bd:de:f7:f2:e5:da:60:8f:55:9d:
48:6b:a8:3b:c3:20:69:c1:f0:64:e4:25:dd:46:f2:df:6c:37:
8f:07:19:56:71:8a:d7:fb:01:ba:69:c6:73:a4:77:2f:bf:25:
41:6b:d0:eb:72:41:12:ca:d6:2b:e9:05:17:41:70:3b:8b:1f:
35:55:ed:ad:2e:21:5d:fb:9a:b6:55:16:26:dd:fe:da:42:f0:
47:37:17:89:eb:a6:16:cc:ec:0f:f2:8d:69:4e:64:d0:de:73:
14:28:e7:9f:56:48:2e:df:27:e4:1b:20:34:ea:fa:12:a5:df:
68:10:39:aa:cc:e0:39:5e:8f:4e:32:f5:e8:f0:48:18:18:f8:
2f:35:76:f1:7d:08:4d:29:d4:12:c4:8e:71:f5:f7:b6:ae:13:
74:9f:e0:b2:ff:df:df:ea:e6:4c:6b:d8:0a:27:29:16:d2:1d:
f6:f4:07:15:34:21:31:dd:3f:b4:4f:0e:e6:df:b1:6f:02:65:
a8:a5:5f:0f:3e:f8:33:18:63:92:d8:9f:b1:cb:d4:f7:08:81:
07:0b:d6:57:db:d2:5c:52:b1:19:50:42:ef:20:1f:b8:8f:71:
35:8e:44:52:3a:e3:22:93:9b:ea:70:f6:64:32:66:a1:3a:77:
47:cd:a1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 00:23:42 2025 by rpki-client