Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
File: -bspsKvoSef-GA4znkscKCNoxSE.cer (raw, json)
Hash identifier: bmVq4VN3PkUjKdP2wWf1O5RIHzqHHejQrWJ8d6ibB1E=
Subject key identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 623F
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 19 Feb 2025 14:10:51 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 143.92.112.0/20
IP: 148.222.64.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25151 (0x623f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 19 14:10:51 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A913E8F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:05:7e:96:70:d8:83:fa:5b:a9:38:fe:9e:
98:dd:01:1b:e9:da:ab:52:2e:c3:1f:6c:56:75:af:
50:74:5a:86:5e:a4:60:c0:d6:73:ad:6a:80:16:2b:
af:04:bd:ff:b2:da:43:f7:fa:0e:1a:15:b9:d6:08:
84:79:f7:da:01:1f:37:9a:15:d4:1c:e8:dc:2f:05:
07:42:67:b6:02:e3:ba:3d:23:dd:1c:b9:b0:24:b5:
0d:d8:7d:7f:b6:8b:73:20:57:05:12:a9:94:f2:29:
0c:35:5b:2d:5b:ab:62:28:bf:42:5b:ea:d1:3f:6b:
a3:dd:2d:d4:ac:fc:6a:fd:d5:c4:30:0d:ac:e1:bf:
a5:a5:0d:32:75:94:9b:4e:3e:a4:f6:23:5c:7a:40:
01:78:80:b2:80:04:95:ab:31:63:59:3c:66:53:73:
4a:f6:eb:d0:2f:e9:47:f7:cd:02:45:e0:0c:50:24:
fc:21:64:36:97:a1:6a:d2:e5:ac:19:8d:f4:91:64:
aa:ed:db:99:ee:49:08:73:78:9b:67:83:4a:e6:6f:
f5:09:36:11:da:0b:f2:3a:e3:5d:80:3d:c6:9f:32:
c7:1e:5c:b2:09:2a:d0:e9:3a:6c:56:81:e9:d6:cd:
38:12:11:85:27:15:7f:a6:55:94:ab:8a:03:c8:29:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
143.92.112.0/20
148.222.64.0/19
Signature Algorithm: sha256WithRSAEncryption
80:8c:6f:b9:19:2d:73:9c:cc:c6:2e:8b:a0:8d:f9:91:13:91:
f1:de:a4:01:40:7f:d0:06:16:60:32:ed:87:ca:15:f0:1e:95:
10:13:05:bf:46:62:e2:de:41:55:29:52:6f:cc:41:46:56:93:
2d:9d:da:55:a2:58:e8:fd:e7:c1:28:f7:58:20:68:3c:1f:fe:
4b:52:46:88:10:83:d5:67:4d:2b:aa:52:a8:82:b7:5a:f6:91:
97:71:d6:f6:58:7d:25:f0:db:c9:cd:19:d9:c5:79:45:ec:de:
b8:93:5f:5a:b8:c6:7d:c4:e4:84:27:42:70:5d:4a:81:dc:25:
60:8d:13:fb:48:f5:f1:f1:8c:79:66:ac:77:e8:09:48:36:76:
2f:e5:24:7a:92:6d:2d:f5:a9:34:98:77:b6:ce:0a:25:0e:ee:
26:17:e7:8a:a2:06:33:c9:a0:40:b2:79:eb:b1:d2:cd:60:da:
db:00:a0:3b:49:c8:ba:ad:bc:70:91:e0:26:ea:c4:5d:ae:4a:
6d:99:14:bf:38:75:a1:bf:cf:c4:56:91:a0:a4:cf:78:e4:87:
f6:34:5b:80:91:d6:4c:91:db:b8:f8:3b:ab:b0:4a:7a:3a:2e:
5b:56:fc:32:e2:e7:63:da:dd:2c:19:7b:0d:82:97:94:54:f5:
f2:2f:ba:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:40:28 2025 by rpki-client