Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
File: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer (raw, json)
Hash identifier: inYNVA8GD6qMtQNap8ALZr7+B9uRAKRq13AxV1Eupfc=
Subject key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6081
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 08 Jan 2025 20:23:47 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 157.10.120.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24705 (0x6081)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 8 20:23:47 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A91CEE85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:b0:64:ac:6b:0a:62:e1:37:18:03:4a:53:
80:0a:34:76:72:60:c2:19:dc:d2:db:bc:fa:bd:fa:
89:1f:69:c3:45:9d:c4:c4:f8:2c:d5:27:fd:54:cb:
c9:23:d3:b9:46:74:2f:17:37:e4:e3:46:cf:2a:92:
65:a4:67:d9:d4:70:3c:da:e7:ba:58:c9:ce:ce:37:
15:aa:9c:9e:93:6e:ea:39:c2:9e:1f:a6:b2:5c:19:
e2:bc:9c:02:d4:ed:10:34:27:0b:87:bd:a6:f9:d0:
6e:d6:bf:bb:33:f5:17:e8:36:59:c9:48:69:c4:19:
63:cf:b4:a2:61:6e:dc:6e:dd:8b:13:66:1a:53:9c:
15:1a:d4:04:40:11:fc:42:c1:9a:39:43:8a:a2:a5:
bb:98:72:02:6e:a5:4a:fe:53:fa:9c:71:43:75:b5:
45:d4:03:e4:e7:7b:ed:db:83:ee:80:e3:f9:08:e5:
47:2d:67:e1:a4:37:7f:62:ee:75:69:c4:20:71:0a:
98:a9:56:57:5c:90:92:17:14:4e:15:9b:e1:ba:ef:
e3:9b:76:86:6e:98:9d:26:83:6b:b7:59:46:9c:e8:
d1:44:e7:87:9b:da:36:a5:b6:ec:57:69:70:e4:31:
42:d4:ab:59:95:c8:3f:6f:10:62:db:70:76:97:71:
ce:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.120.0/23
Signature Algorithm: sha256WithRSAEncryption
92:49:9f:c5:31:03:1a:02:67:c7:14:a8:82:94:a4:9c:0e:1e:
0a:8a:c7:18:75:b2:20:dd:d4:f4:66:bf:fa:07:50:1f:7a:ee:
a3:9e:86:1d:be:11:47:2d:09:96:7b:38:f9:f4:0d:b5:c7:26:
e9:ea:fa:9a:4e:5c:7a:14:4c:78:ab:03:c0:c4:a8:66:a4:05:
ce:b8:2a:a0:a8:7b:37:ef:74:7b:5c:f1:90:63:af:72:7b:28:
2b:44:15:8f:17:3e:c3:53:d4:7a:e1:53:ce:38:10:26:68:29:
15:bd:11:fa:09:54:c8:d4:d3:77:5b:1b:f0:92:db:b6:e6:41:
e9:22:5a:15:5e:ce:86:b4:d5:a1:36:ff:3b:50:a1:ae:c1:30:
a8:7d:2c:a7:c6:35:69:7c:10:7f:5e:48:07:f2:8f:bc:af:91:
37:00:25:8f:d1:85:e4:17:ac:29:55:45:9d:ee:4b:19:09:a8:
a6:22:a7:1e:e1:12:da:53:d8:a4:00:9a:90:1e:aa:61:b7:59:
2f:d4:ed:46:6e:d2:ab:ca:6f:90:2b:55:6d:81:85:cf:b5:64:
29:4e:84:93:13:46:f7:a2:0a:d3:a5:29:19:e6:8d:bb:eb:26:
03:13:0f:b4:32:87:32:ec:f0:10:f7:0a:05:30:ec:15:0b:8d:
6f:7e:22:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:36:08 2025 by rpki-client