Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer
File: quimiBHXcVavSOB4FMqP1mI9mL4.cer (raw, json)
Hash identifier: PHCkQaj8ndgpQQNdPKmbBaYKXDuND5K8G/E3AAzQ3U0=
Subject key identifier: AA:E8:A6:88:11:D7:71:56:AF:48:E0:78:14:CA:8F:D6:62:3D:98:BE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 024481
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 06 May 2025 21:49:42 +0000
Certificate not after: Thu 30 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 45189
AS: 55412
IP: 122.99.124.0/22
IP: 203.175.176.0/24
IP: 203.185.191.0/24
IP: 223.26.32.0/20
IP: 2407:3400::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 May 2025 21:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148609 (0x24481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 6 21:49:42 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=A914CDF9, serialNumber=AAE8A68811D77156AF48E07814CA8FD6623D98BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:ee:66:b1:b2:37:b1:17:be:39:0b:fa:51:
e0:ee:93:0a:1d:f0:96:b2:4f:46:f8:7d:47:60:2c:
94:b2:dd:f2:c8:14:dd:5c:c0:0b:a8:07:6f:b7:b0:
9c:31:7f:ba:d3:31:28:f6:e9:81:bd:a4:01:58:1b:
68:bc:96:d9:78:fe:40:23:a1:60:28:42:cf:19:a8:
59:0b:6e:8a:0c:34:c6:51:98:d6:a6:5d:27:22:94:
e0:a3:2e:06:4c:e3:42:d8:b4:cb:5f:61:be:c0:60:
87:30:80:73:fd:11:03:aa:5a:d7:d0:8a:24:0f:6c:
18:f6:b9:10:e4:02:15:01:0d:e0:82:7f:52:0a:04:
c2:8c:76:f4:c5:88:8f:98:bf:00:17:59:0b:31:79:
dd:99:d5:9c:16:d3:c8:9e:bb:87:56:6e:c9:d5:c6:
27:86:52:51:2f:e5:42:2a:3f:58:50:3d:73:a2:8f:
0b:e1:db:4f:b5:79:62:ed:f6:78:14:fc:bb:86:d3:
53:ab:9b:d4:00:39:8a:f0:03:27:f3:eb:3e:47:2c:
c7:73:2c:63:8f:d7:46:46:bb:63:34:bf:8e:11:56:
b2:a4:50:cd:6a:f7:32:9b:63:22:a9:c3:92:a0:61:
80:64:e7:6c:cc:11:2a:19:a5:56:db:64:33:33:bb:
00:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E8:A6:88:11:D7:71:56:AF:48:E0:78:14:CA:8F:D6:62:3D:98:BE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45189
55412
sbgp-ipAddrBlock: critical
IPv4:
122.99.124.0/22
203.175.176.0/24
203.185.191.0/24
223.26.32.0/20
IPv6:
2407:3400::/32
Signature Algorithm: sha256WithRSAEncryption
82:08:e1:00:b5:bf:af:15:31:71:45:6d:67:48:1b:d0:f0:62:
71:d9:e0:91:d5:ad:33:fc:18:44:c8:ed:ee:1d:81:16:e6:4d:
e0:cd:01:7c:1e:52:da:84:5c:53:cd:f4:cc:18:f9:60:14:9d:
6f:04:c9:ba:d3:14:0e:6d:fa:80:3b:70:8f:80:e4:98:f2:90:
46:4e:80:86:01:39:54:f5:dc:72:eb:e2:02:33:e9:e4:aa:c0:
db:bf:64:7c:60:4d:4f:39:e3:e0:af:f2:92:96:d4:24:4b:01:
15:f7:17:e2:cc:95:bc:6f:75:11:6a:d8:25:ac:63:9c:44:cd:
48:ee:a2:b2:20:b8:25:5b:d0:a1:00:68:5a:59:70:88:42:74:
bf:af:05:40:26:95:47:ea:83:90:06:dc:bd:4d:65:91:40:69:
60:c1:67:a2:41:4e:8b:9f:63:da:72:14:a8:66:87:2e:c6:49:
93:c1:ff:8b:d5:d3:12:98:8e:50:df:f9:76:5e:91:90:b3:cb:
47:d3:b2:2f:fa:04:99:02:36:9a:a5:07:f1:cc:87:c8:88:b1:
88:bb:a8:bf:d8:fe:66:57:1c:de:53:a1:94:43:36:91:ae:77:
2c:2a:12:05:15:ca:cf:50:8f:64:a6:66:de:a2:47:49:dc:32:
87:22:7b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:45:49 2025 by rpki-client