Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer
File: BdNlUA2kssABifPGyllQ4AdMfEo.cer (raw, json)
Hash identifier: SNokVPwytveADftqRIk7O5W8lWXdK1262ws9Feu5HFw=
Subject key identifier: 05:D3:65:50:0D:A4:B2:C0:01:89:F3:C6:CA:59:50:E0:07:4C:7C:4A
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5F4B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 13 Dec 2024 02:13:12 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 152.65.192.0/18
IP: 199.247.160.0/20
IP: 207.66.112.0/21
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24395 (0x5f4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 13 02:13:12 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91C8EDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:67:86:e5:94:16:42:fa:a5:33:13:3d:d4:
f4:02:04:45:15:af:53:d0:10:6c:9e:d8:d6:e2:eb:
0b:0f:c1:60:1c:42:7a:f7:b7:62:ad:c8:be:35:87:
f1:66:0c:fa:8f:4e:5e:cd:cf:0f:ac:54:cd:a4:48:
31:67:39:b3:ff:08:ec:54:1c:e1:b6:09:d8:26:82:
10:ac:8f:2a:99:64:23:2f:fa:13:36:b5:db:cc:66:
e9:23:26:c5:b1:7e:05:63:9d:28:24:6f:5f:91:ad:
55:5d:ad:c9:27:91:f2:24:ca:0f:4a:49:ae:b4:ee:
13:f8:e4:c8:01:41:cc:11:8d:c8:b3:fc:54:74:bd:
28:29:34:34:58:2f:e8:25:a7:c4:81:4f:d1:6f:99:
96:43:64:e6:17:82:c4:74:7a:69:f3:d1:10:58:32:
6c:fe:c6:48:4a:95:3c:0a:2f:c5:63:24:b0:ca:11:
85:dc:55:4a:5d:51:7d:2f:10:68:80:0c:fb:c2:6b:
bb:7b:8e:80:b0:3c:dd:35:64:74:2c:3b:aa:ac:41:
3d:05:2d:9b:25:b6:77:c3:e1:22:93:ca:88:5a:55:
e7:65:66:cd:79:d5:bd:78:6e:8d:0c:3e:94:4f:96:
ef:b9:99:e0:b4:85:36:2b:c8:5f:b0:a9:55:7b:80:
2a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D3:65:50:0D:A4:B2:C0:01:89:F3:C6:CA:59:50:E0:07:4C:7C:4A
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
152.65.192.0/18
199.247.160.0/20
207.66.112.0/21
Signature Algorithm: sha256WithRSAEncryption
50:f3:f4:23:53:ea:62:6d:4f:7a:90:88:3b:28:92:c9:75:e7:
c6:94:28:45:60:bf:d9:70:f2:1f:c4:43:b1:5f:33:c0:13:d2:
06:c4:14:10:95:e1:13:a3:0a:db:bc:35:8d:a9:a5:91:75:04:
14:b2:04:32:8f:42:ef:00:3e:d6:2c:3d:00:57:52:fb:27:d9:
c9:e9:47:66:2a:1a:ce:8d:a2:88:37:d4:f0:41:57:3e:26:13:
55:37:20:da:9b:51:1a:fd:96:f0:1e:df:ee:af:c9:d9:df:83:
87:17:34:72:47:b8:b0:da:98:c2:46:2a:f1:24:7a:c6:e6:91:
bf:d3:46:c9:66:63:a9:43:1c:5d:06:51:bb:3e:d9:99:38:55:
b8:a6:cc:77:b4:48:86:8c:e0:08:de:a3:ce:99:36:85:f0:ee:
6d:0d:eb:b5:cb:61:cb:fb:a4:70:42:8c:fa:60:52:ad:72:36:
a9:a8:a6:0b:56:b2:95:89:83:11:cc:16:96:85:fe:b3:cb:0b:
d3:01:ca:20:bc:ef:f3:3f:58:a1:29:f9:5e:b2:76:50:a4:39:
ba:4f:53:da:c7:ce:70:0f:57:f3:3b:7e:f6:7c:0f:39:5f:c4:
da:a3:67:6f:e4:10:91:52:af:41:58:83:52:7f:37:58:30:01:
a5:80:38:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:38:47 2025 by rpki-client