Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
File: 18ttHdz5NKH1nk_-SYLwtMUsNfU.cer (raw, json)
Hash identifier: PSDCP+sHQOuqIuEp7M6+HUrpz07KUaWlbjqka/zNErM=
Subject key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5F8D
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 19 Dec 2024 14:34:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 64.119.16.0/20
IP: 66.181.160.0/19
IP: 192.82.64.0/20
IP: 192.82.92.0/22
IP: 192.82.100.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24461 (0x5f8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 19 14:34:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=A914DA2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:2f:f0:f5:0f:22:45:50:29:45:c6:bd:19:
ab:c1:1f:be:c1:15:0a:d9:eb:19:95:89:92:dc:9a:
70:3f:f0:63:6b:dd:48:e6:4c:6c:79:82:6b:a2:dc:
d6:ff:26:12:2a:fa:dc:8a:63:d3:d9:4b:0d:a0:24:
8e:e2:62:c6:27:79:66:d2:a3:e5:16:d2:18:5e:56:
30:87:28:1f:af:25:6d:db:12:d1:8c:07:fe:b9:93:
e6:d4:d6:42:af:4f:df:f6:43:cd:2a:f0:48:df:1a:
0f:29:5f:6c:07:a7:ea:4e:9d:d7:96:de:61:c6:d8:
eb:54:f8:cf:35:2c:83:e8:d0:b7:e4:1e:6a:b2:61:
97:a8:8a:2e:63:97:68:97:21:28:a7:74:50:4f:3c:
65:e4:aa:85:75:76:a7:b6:9b:dc:b4:ad:26:f7:df:
47:d6:14:4c:5f:5a:f9:f8:32:68:0b:9b:0c:6d:3e:
42:ec:17:79:81:03:08:53:83:09:c2:14:8f:4e:08:
64:11:a1:9b:bb:4d:01:4d:a8:65:a3:1f:0e:6e:79:
d9:1e:ff:4d:7d:f6:8c:2d:bd:9b:7c:00:26:06:c2:
7b:0e:18:f0:df:2e:99:74:93:79:c3:13:b7:62:8a:
f6:b3:ad:30:a6:0f:3e:d6:71:f6:ed:42:f0:85:e1:
81:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
64.119.16.0/20
66.181.160.0/19
192.82.64.0/20
192.82.92.0/22
192.82.100.0/24
Signature Algorithm: sha256WithRSAEncryption
08:af:46:fc:a2:09:a1:fd:3f:bd:9f:56:85:45:2c:55:b9:f7:
b7:e6:7a:2c:b8:86:01:1e:e2:7a:9a:bc:d6:ac:8d:dc:34:a9:
9a:f5:7f:b3:af:60:e1:7a:89:1b:bd:7b:c5:a8:91:b1:d2:0b:
5c:d8:f6:a6:36:55:07:da:35:27:72:72:ac:b4:21:0f:b5:75:
fa:d3:ee:ca:13:32:fe:ae:00:9e:77:ad:dc:5b:f0:70:68:36:
01:27:77:1f:62:a4:43:ab:96:28:da:8e:6b:a4:5b:5f:25:7a:
eb:96:84:e9:5c:4b:1f:c7:84:6a:b3:3b:ec:3b:0c:9c:90:0b:
c4:e7:92:45:28:e9:96:fe:2d:5e:1a:3a:99:91:a3:66:04:64:
88:d9:7d:f1:7c:7e:20:dc:2b:d3:5a:86:21:2f:71:fd:7e:8d:
fe:3e:8f:e8:93:47:d6:4b:f1:d9:f4:da:db:25:dc:7b:01:e2:
c4:64:e5:a7:40:1c:10:84:3b:19:23:a1:ab:91:55:f0:e8:3a:
e5:50:99:04:d1:6e:db:7e:5d:54:05:55:52:f1:80:b3:93:2b:
a9:8e:a4:ca:c4:a5:d8:88:1a:64:1c:08:c0:dc:72:74:26:8b:
2b:0d:3e:aa:31:aa:e0:00:ed:43:19:45:29:19:c6:88:58:9f:
50:85:9f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:53:04 2025 by rpki-client