Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer
File: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer (raw, json)
Hash identifier: xtUvfqm7gV6SrJI5pYoNEYHjzthNJ0Yq0E6rOaSsZJI=
Subject key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5F55
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 13 Dec 2024 18:44:51 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 206.209.76.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24405 (0x5f55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 13 18:44:51 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91F59A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:5a:1a:4c:14:6c:f5:63:07:e2:f7:1f:b4:
a2:51:84:65:fa:c6:80:8e:61:be:c5:25:c6:ec:c0:
7c:bd:59:f7:7b:73:1a:bd:ad:4e:26:69:0f:e4:5d:
0b:42:7f:5c:75:66:43:35:c1:01:50:82:a5:cc:1a:
e1:da:9b:07:99:81:1c:49:ba:bb:8c:83:37:fe:9c:
8a:64:74:b4:25:f6:90:11:b5:30:89:d5:93:8f:7d:
4b:37:0b:65:06:34:79:e2:93:08:53:ac:02:f3:f7:
ea:84:5f:44:57:bf:95:07:95:21:52:30:84:99:51:
e9:29:22:c2:f5:6e:f9:78:33:d2:34:91:0d:04:15:
2c:2c:c3:67:0b:18:1d:21:9b:47:c7:a8:a2:c9:e8:
50:42:9e:37:32:69:2c:dd:00:2b:b0:fc:5c:fd:8d:
1c:6d:7f:69:2c:87:09:68:2c:6d:ac:49:a6:ee:b2:
02:88:b3:87:e9:a7:f1:fb:81:1e:09:ee:5c:83:b6:
56:1c:a1:95:ee:05:df:5a:d2:45:c6:4b:e9:98:13:
b7:01:83:7d:c1:89:7e:6d:7c:92:b3:56:6a:0b:48:
e8:c9:3c:b1:89:bc:61:8e:95:7a:7f:3a:76:99:b4:
48:94:21:ad:f1:db:e3:0f:e7:61:de:e6:bb:e4:8a:
f0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
206.209.76.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:44:69:3b:38:84:26:e8:5c:d0:45:8c:99:70:7c:42:62:7f:
c4:25:ab:70:ee:00:65:d5:1c:88:73:74:46:5e:d5:39:76:d3:
e8:ff:6e:c0:d7:52:d3:2b:10:17:9e:ff:3d:52:8a:d9:12:a8:
cd:c9:5e:5e:53:79:59:0b:00:84:e0:46:20:0e:bf:7a:e9:75:
3f:85:7c:0d:95:a8:25:c2:02:6e:f8:73:6c:0c:46:e3:c7:75:
9c:54:3f:9f:2c:97:05:58:9d:8e:a1:5d:e1:a1:79:70:8d:3c:
0f:db:76:73:79:f8:9b:e9:dd:47:06:02:12:7f:b5:b5:79:7f:
39:02:be:d6:44:26:08:a5:cd:74:1d:2c:bb:0d:14:c8:0e:26:
1a:ef:c0:42:43:0d:9e:84:83:09:c0:c5:e8:33:b5:ce:d3:89:
53:ae:43:29:cd:91:28:f3:53:40:41:84:87:b8:7b:cb:9b:17:
9b:71:7e:bd:d0:5d:73:a1:3b:6f:42:1a:3b:81:f9:4e:aa:1e:
03:ad:28:7c:5f:88:54:1e:f2:0b:86:04:ed:5e:e5:dc:ae:a4:
b7:98:f5:ea:9c:8c:11:fc:7a:61:36:42:96:66:65:8a:ca:19:
01:18:3e:0d:f3:21:41:5a:e9:6b:73:87:ee:90:43:a9:f6:08:
9c:e1:a8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:43:12 2025 by rpki-client