Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer
File: 11KsJgWV3m0QKce5SPSUl-SD6s4.cer (raw, json)
Hash identifier: +77T6nfk7w+76UenpsO9aLEYfZU5Kajknypftb70Fgg=
Subject key identifier: D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 619D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 30 Jan 2025 14:52:01 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 130.102.0.0/16
IP: 192.12.76.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24989 (0x619d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 30 14:52:01 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91383B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:c7:14:2c:8b:98:a4:05:5f:56:0b:25:73:
05:ef:cf:44:81:50:d6:d9:34:e6:dc:c7:6a:17:e8:
14:f7:52:f7:58:eb:4e:62:58:6e:0b:a9:62:97:39:
f6:cc:3e:5f:35:f5:45:b9:f5:35:de:22:97:24:98:
dd:9c:8f:cb:e9:0f:67:d3:e2:76:7b:d1:b1:2f:e1:
a7:1e:4f:fa:eb:f2:ef:1f:e7:66:b9:4f:c5:a3:6e:
f7:45:36:37:61:24:97:d9:95:bb:25:d3:79:bd:5a:
47:a2:9d:77:d8:9a:c6:6c:f5:4c:62:60:b8:e0:9c:
46:21:bd:f5:6c:f9:d6:dd:77:5e:8c:ef:5a:b1:bc:
87:09:b3:dc:50:6e:d3:cb:6a:e7:71:53:50:6e:0a:
64:45:7e:5c:ee:09:aa:bf:17:5b:53:26:d6:14:48:
07:43:18:34:af:c4:fd:1a:57:be:55:fe:f7:64:ae:
ce:73:2e:09:d2:9c:02:ff:e2:ef:fe:31:3a:c8:c0:
c9:2a:0b:b5:71:a1:2a:a9:c1:bc:42:e6:49:dc:f5:
14:8b:6d:dc:47:af:fa:af:0a:4f:3b:ff:c5:16:88:
88:55:ae:0d:df:22:35:e3:2d:a2:22:2c:7f:6a:b4:
87:5c:56:c0:c5:0d:96:b8:92:fa:13:d2:3d:7d:ce:
fc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
130.102.0.0/16
192.12.76.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f5:03:7e:fb:df:a3:48:f7:76:fe:23:39:cd:bd:8d:08:bc:
ab:d0:0c:ca:f1:ec:9d:e1:74:ba:cd:5d:7e:cf:fa:18:c5:80:
72:d6:ef:01:95:7a:b0:b4:29:37:95:66:b1:96:bb:91:eb:80:
d1:44:1c:66:cf:36:2c:e5:28:0c:63:41:72:26:30:e8:32:d2:
b5:e9:ea:cd:6e:6f:57:d3:26:6d:68:2f:24:fb:52:b9:08:3a:
e3:49:2c:af:3f:6b:03:19:1d:51:ad:34:8a:62:80:b1:1b:61:
0a:7e:13:1e:70:16:eb:43:fe:0f:ed:c4:21:2e:ef:d8:0b:16:
97:c9:6c:50:5f:4c:97:16:fc:29:f4:39:4a:e1:86:b7:93:dd:
18:42:d4:b2:43:1e:31:6f:bb:26:45:b7:5c:f3:4d:f0:f5:17:
b8:13:b5:87:21:71:dd:8d:07:86:9b:6e:2e:e9:4f:81:bd:61:
29:d5:0d:cd:19:84:0a:25:c4:ac:95:5e:0f:45:e9:41:a9:41:
8d:81:86:aa:32:6d:8d:3b:12:c1:69:de:d0:43:db:22:67:47:
96:29:68:07:e6:a1:29:d9:13:5f:23:8e:e5:22:29:93:49:d7:
65:1b:14:b4:c7:43:6f:83:be:40:c3:fd:af:00:ad:6b:5e:35:
a9:e7:a5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:46:32 2025 by rpki-client