Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
File: 1j3oKnWfllf48HOyUSUarme6S6Y.cer (raw, json)
Hash identifier: QwK6jHgMCnRysIKgD6w1MXmEUipYj+JzI0Y95k2oGzc=
Subject key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6156
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 22 Jan 2025 12:44:15 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 147.50.0.0/19
IP: 147.50.34.0 -- 147.50.62.255
IP: 147.50.64.0 -- 147.50.78.255
IP: 147.50.128.0 -- 147.50.175.255
IP: 147.50.224.0/19
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24918 (0x6156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 22 12:44:15 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91262CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:52:6f:ad:2e:28:53:91:ec:1f:b7:34:dd:
b9:e0:8d:2e:0f:f5:2d:2b:1f:a4:44:64:f7:c5:46:
91:47:0a:e5:23:06:19:5b:d6:c4:49:0a:46:41:bd:
72:d9:e2:aa:d9:c5:fc:fd:a3:ac:61:3d:01:34:ca:
d3:c1:75:03:b2:b9:5b:1a:da:f9:32:69:1e:dd:7a:
05:47:27:a8:1e:b1:76:56:79:cf:68:61:17:3e:96:
49:6d:65:84:3e:2e:67:dd:96:00:9c:e3:4f:bd:66:
e0:b0:5d:ad:39:ea:ca:12:14:5f:33:e4:16:9a:3a:
1d:fe:71:fb:0c:b7:7a:27:31:6e:0a:9b:d5:f5:ad:
3d:ab:7f:fa:81:cb:4c:53:fd:d4:a5:f0:a6:b7:e0:
5c:b5:a1:e8:c6:b9:b6:8c:f3:f2:8a:77:29:30:1f:
41:ae:6e:41:68:d1:41:df:42:c2:79:37:26:ca:3f:
a0:80:f3:0d:a7:18:0b:82:98:a4:cb:60:d4:cc:e5:
84:8c:cc:1b:36:3a:23:7f:d1:6e:b4:3d:38:5a:6c:
ca:45:c1:29:47:4c:13:51:db:90:6b:c3:a3:54:03:
ca:01:02:7c:aa:34:8b:2e:17:23:9e:77:30:9a:2d:
98:81:fc:84:99:d5:91:81:1a:16:ff:a0:5a:e7:5f:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.50.0.0/19
147.50.34.0-147.50.62.255
147.50.64.0-147.50.78.255
147.50.128.0-147.50.175.255
147.50.224.0/19
Signature Algorithm: sha256WithRSAEncryption
86:55:e2:78:cc:71:24:54:0c:ab:cb:85:7c:e3:ef:89:98:e2:
c4:da:99:93:48:42:d5:3a:9c:bc:3e:df:39:63:66:0a:91:f1:
16:7a:59:e8:79:12:55:ed:31:34:e3:2b:e2:ee:bc:61:cd:f0:
d8:80:c9:77:0f:ba:fe:bc:df:52:1a:2e:c3:1f:3e:72:fe:a9:
99:81:52:66:f4:18:93:88:9c:ea:8a:78:92:45:1e:7a:a8:fe:
1d:d7:36:e2:de:60:d2:9f:c3:07:fe:54:56:4b:45:77:7a:af:
1a:3f:eb:05:c9:52:eb:af:c1:74:ce:5f:16:52:ec:7f:85:b1:
fd:14:40:8f:e1:0c:c6:21:2c:38:41:7d:b0:89:3c:aa:06:4c:
6b:99:a4:ba:6c:4d:63:72:14:a9:ca:c0:1e:31:e2:23:67:07:
9f:c6:c2:48:2d:47:5a:93:ec:53:f2:6b:a9:da:98:a7:f2:24:
79:3d:45:1e:a0:1b:7c:8a:9f:8d:2d:32:8d:3b:cf:2f:65:16:
d6:91:ff:40:0e:73:be:7c:d7:5b:7e:85:d7:51:b2:72:2f:92:
ff:af:39:35:18:c9:06:f0:9a:94:cf:61:97:a7:0b:0d:1f:17:
e4:fe:72:f8:6b:8b:9f:28:92:d9:d8:95:2c:78:11:05:56:e0:
43:9c:44:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:44:03 2025 by rpki-client