Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer
File: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer (raw, json)
Hash identifier: QSmjPk7kKDq4Esose7BcCWZSUoBKgde9Px16rFQRDsc=
Subject key identifier: F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 61AF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 31 Jan 2025 13:49:36 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 161.248.202.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25007 (0x61af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 31 13:49:36 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91709F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:37:dc:21:d6:22:69:fa:4d:39:c3:75:0b:
56:0a:7a:ea:29:09:d8:c1:5b:78:6b:90:a4:b6:40:
f8:31:49:02:1e:ff:e3:ca:41:72:ff:73:21:89:0f:
3b:a9:df:9f:fe:dd:f4:b5:3b:b6:3b:c7:a3:1f:e3:
40:64:1f:70:a0:83:9a:18:d1:d4:d3:c4:96:9c:ce:
4e:36:32:11:b9:3a:13:af:fd:4d:3d:3d:ee:f2:98:
d5:47:57:c0:66:73:e5:84:37:61:15:13:f0:a9:5a:
06:bf:f8:81:36:5e:5c:0c:0d:25:61:ff:53:39:fe:
46:8c:42:d6:ac:26:a0:bc:e7:8a:33:1d:a5:bb:0b:
94:64:72:b1:94:da:27:f5:0d:3d:7a:e4:53:57:38:
0b:d6:10:8d:35:8b:cd:a6:f2:15:1a:49:24:19:0a:
fc:49:0e:89:71:e9:c8:5f:42:4f:4c:2d:2a:e9:71:
cd:ee:90:ad:30:c1:87:45:03:c5:d4:55:ee:66:a1:
ee:1f:f2:0b:9c:6e:d0:e0:67:c4:e7:b5:d8:66:c5:
13:5c:43:01:3b:48:17:58:76:ad:d3:d2:fa:29:9f:
0c:fa:3a:5e:fb:e0:4e:92:48:5c:67:bf:89:5d:39:
f4:40:fb:87:30:5b:76:94:d9:d1:25:38:d8:4b:54:
79:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.202.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:d6:dc:d9:5b:d0:77:d1:84:3a:ec:85:ae:a7:a6:d3:c1:5d:
38:b1:5d:14:42:db:73:65:82:55:97:a2:27:13:a1:cf:4e:bb:
07:2f:78:d2:71:38:c6:3a:f5:b8:e4:2a:b2:76:45:cc:41:a3:
37:bc:55:e4:4f:89:17:22:98:85:d8:a1:5e:38:63:03:6d:6b:
ea:20:c6:49:6d:bd:42:94:9b:24:06:9f:2d:76:52:0c:18:8f:
ca:f0:b2:f5:51:c8:1a:2c:d4:38:7c:e0:bb:67:55:66:ee:0e:
27:27:55:6a:76:0d:f7:1a:f3:d4:b9:46:74:40:44:05:cb:44:
d3:c5:a2:31:c3:de:4d:39:78:21:3b:e2:70:67:73:d7:52:fd:
d7:d9:0d:26:ab:b5:d1:4d:90:28:56:74:43:65:ed:6a:d6:4b:
d0:c2:e6:5d:4f:28:3a:81:61:11:af:a8:d6:a6:43:62:67:44:
18:7d:9a:3e:c2:84:d0:9b:a3:9f:5d:44:f6:76:8a:73:64:a4:
c7:10:56:52:c0:e0:e5:b3:18:61:db:ff:76:23:4b:52:dd:85:
d2:f5:56:03:42:e5:1e:7a:0b:bf:88:cf:18:23:b9:8a:c3:67:
aa:9a:4b:4c:64:d5:8c:6a:44:2a:8f:1b:8f:8f:d2:08:6f:7c:
55:af:7c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:43:14 2025 by rpki-client