Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
File: eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer (raw, json)
Hash identifier: /Cn/EifUagVWwY6wdq51R/1ZErOYX6y5Hq8ClPDv+nA=
Subject key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 023F83
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 17 Apr 2025 13:59:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 133104
IP: 103.152.248.0/23
IP: 119.252.176.0/21
IP: 2405:c400::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 May 2025 20:56:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147331 (0x23f83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Apr 17 13:59:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ea:17:cb:37:17:49:d3:05:f4:e3:80:9b:29:
44:36:ef:5b:19:ba:d2:51:40:71:eb:20:2f:12:43:
f0:86:48:d6:33:07:0b:86:a1:6a:07:14:87:0c:29:
77:ea:74:ba:0a:8e:01:91:63:45:cd:b9:b2:7c:b9:
4c:af:20:d4:cb:a8:33:79:42:9b:f1:38:a0:87:09:
6d:6a:6f:84:30:9f:e3:32:41:61:59:b6:b7:09:b6:
43:d2:26:8e:61:e6:85:28:37:ba:40:12:5c:44:13:
73:8d:a5:55:9a:d8:5e:5d:1a:a2:69:ed:46:60:10:
f8:48:50:d7:05:6e:0b:7d:59:44:21:0a:f0:29:61:
cf:e9:72:1d:5b:5f:af:fc:b4:c1:44:f7:2c:16:9a:
9a:81:90:97:ae:15:a6:dd:b0:5b:16:04:2b:43:48:
8a:cb:02:b5:c4:38:66:0c:b1:0d:b1:39:e6:14:a6:
d8:cc:b0:a0:d0:b0:82:ea:c7:5f:ac:96:62:ed:df:
cf:89:90:fb:b9:2e:86:ad:99:92:6f:c5:7d:f6:c0:
51:e7:0a:24:2f:78:59:ab:4d:0a:6c:57:9b:21:a5:
34:48:a1:5c:01:6c:66:58:89:cd:b9:40:5b:9d:96:
e7:20:44:df:82:9c:a6:36:bc:f9:cd:1a:20:6b:2c:
17:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133104
sbgp-ipAddrBlock: critical
IPv4:
103.152.248.0/23
119.252.176.0/21
IPv6:
2405:c400::/32
Signature Algorithm: sha256WithRSAEncryption
bb:cd:bd:f1:db:15:50:0e:39:4d:e7:f8:d7:a3:39:1c:92:92:
c1:2a:05:18:37:16:a9:a4:f0:eb:37:6c:44:82:51:03:2d:0f:
e1:83:a7:b2:13:a1:66:6a:d6:c7:74:d7:7a:df:09:e7:9b:35:
97:08:80:98:6e:9a:38:69:4c:cd:c3:e0:cd:c8:26:6b:1c:f0:
8d:57:5e:24:91:05:00:e0:03:31:04:6c:29:a4:a7:00:e4:9a:
41:49:11:b3:38:b2:ac:22:f1:69:96:5a:d6:e5:6a:f9:a0:06:
50:57:b4:d1:95:03:32:fc:06:c0:8f:41:1b:ba:2c:47:28:5e:
e0:82:af:71:b0:47:a0:32:46:b6:a2:21:7c:bb:ad:44:68:f9:
8f:e5:b0:6b:ef:d7:4b:be:18:9e:97:91:02:fd:42:f8:a3:59:
85:d1:72:00:a0:bf:28:52:44:0e:35:7a:4c:fa:6b:a5:7e:a6:
ad:b1:c8:17:01:c3:7f:4a:05:51:8a:08:51:d8:fa:af:6a:27:
84:78:b9:a2:71:ba:3f:a1:bd:ec:a4:0a:9c:7b:dc:a9:99:b0:
64:f1:b7:00:c9:59:32:38:02:16:1b:41:5a:b2:c9:cf:28:55:
06:f2:43:c3:e3:4a:ef:6d:c0:c9:ee:19:c4:86:4b:4b:c5:6d:
3f:ea:a6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:09:08 2025 by rpki-client on console.sobornost.net