Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer
File: at5OHE4cCb8U36pMPWAPQY4X5y4.cer (raw, json)
Hash identifier: Y7IuBJuktD3gENRzeW3Bta6saRhdimVc/XX2NhU7gyQ=
Subject key identifier: 6A:DE:4E:1C:4E:1C:09:BF:14:DF:AA:4C:3D:60:0F:41:8E:17:E7:2E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0243B5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 03 May 2025 16:03:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 38437
IP: 103.250.228.0/22
IP: 120.89.84.0/22
IP: 202.20.97.0/24
IP: 2403:e00::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 May 2025 18:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148405 (0x243b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 3 16:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A918429B, serialNumber=6ADE4E1C4E1C09BF14DFAA4C3D600F418E17E72E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b6:01:97:7c:18:53:38:ee:7f:74:b3:9b:1f:
0d:b3:3e:22:d0:f2:3f:5e:1f:3a:58:18:b9:00:70:
2a:a3:03:31:01:5a:21:34:15:a4:d9:67:29:40:b5:
98:b0:2e:17:1e:88:ae:a2:ff:44:56:f2:5e:73:fc:
74:74:2e:38:08:1e:3a:50:18:67:24:01:c4:c8:72:
bc:8c:92:32:06:b3:69:5b:4d:11:a5:49:38:d8:f0:
16:c7:36:17:aa:4e:99:f4:f8:a2:7b:b8:0f:fb:9b:
f0:e2:3e:9c:bc:8c:c7:bf:9d:83:3c:ca:49:c5:ab:
db:84:7d:6f:1d:63:40:30:68:43:dd:6c:7f:83:12:
c9:40:51:34:9f:0f:5c:d2:8d:bf:71:4c:73:20:10:
5c:c5:b3:df:f5:f3:d2:33:ee:1b:85:45:ad:ed:56:
3e:a0:8a:94:42:a4:af:0a:88:a9:b8:18:83:78:cb:
80:cb:5b:5c:18:cd:11:e6:2c:08:4f:4c:2b:3a:ff:
34:20:b5:5d:8c:5f:38:73:b2:f1:4a:79:61:c1:39:
15:77:1e:74:8e:55:83:8a:e9:40:6f:40:08:3f:ce:
d9:5b:4c:fb:95:b5:91:1b:30:80:18:ee:5e:0b:94:
1b:83:e4:c3:e3:a1:11:d0:0a:18:ad:3a:49:dc:5f:
72:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DE:4E:1C:4E:1C:09:BF:14:DF:AA:4C:3D:60:0F:41:8E:17:E7:2E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38437
sbgp-ipAddrBlock: critical
IPv4:
103.250.228.0/22
120.89.84.0/22
202.20.97.0/24
IPv6:
2403:e00::/32
Signature Algorithm: sha256WithRSAEncryption
17:20:01:28:ff:f3:ca:61:10:41:e8:bf:2a:de:c5:1d:b4:ec:
e7:d0:32:80:e9:df:d9:d4:1d:f6:93:fb:1e:9a:17:68:67:2a:
d1:4c:a7:ae:18:a5:3c:1d:76:68:1c:b6:a7:ef:dc:2b:02:51:
cf:20:36:4a:f2:3f:6f:03:78:87:aa:88:de:d1:47:af:03:9f:
a0:b9:04:37:65:96:3f:2a:a7:1f:63:56:71:25:83:3d:a2:09:
fd:40:85:de:15:38:93:d8:c4:7c:69:f0:6e:e5:9a:46:e8:a4:
61:46:b9:61:f1:71:58:65:33:75:f6:a2:7a:0b:aa:17:7e:b8:
58:7b:2c:2d:a8:cb:b1:47:37:8a:89:4d:aa:36:b5:db:5e:96:
5a:d4:13:c9:c1:7b:2e:7c:75:60:f3:c4:67:7e:f0:44:64:10:
ac:ff:b1:be:fc:04:34:1f:66:f0:00:e6:31:ae:d8:8b:2a:29:
3e:8f:ae:c7:4a:e3:cf:49:54:5e:8b:ca:03:92:b6:30:59:36:
f1:bb:be:a8:ed:00:a1:6a:60:3a:bb:27:21:c2:2d:10:7d:c3:
ff:fa:96:ec:98:b9:5f:27:de:97:fd:56:d7:09:8c:19:f8:da:
b8:b8:3d:4d:f6:ca:32:36:c3:91:f5:9e:d0:9f:3c:64:55:d2:
c0:31:04:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 21:25:59 2025 by rpki-client