Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer
File: CDWHSXi6MJ7X2kZz53OdkyLyYps.cer (raw, json)
Hash identifier: FoPHjYKlzAFAJb5Eqc7UFBsNKWJQLle7Q2P2Az5Rn0M=
Subject key identifier: 08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 613B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 21 Jan 2025 08:19:57 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 161.248.241.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24891 (0x613b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 21 08:19:57 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A917E00F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:15:48:6d:f5:8f:47:1b:c7:c5:a3:1b:85:
72:dd:ab:83:74:d7:bd:fb:fb:86:13:83:54:57:cb:
ef:e7:60:ba:f4:1b:78:76:60:1a:d0:6b:af:90:a3:
45:8d:5f:48:b9:72:e7:a3:44:fc:d7:1f:4d:ae:df:
8b:ac:30:38:e9:e9:3b:29:43:9a:b1:bc:c5:d1:e6:
87:24:6c:cc:4d:24:1a:ee:57:2e:e4:38:e6:23:32:
9f:85:42:b6:1c:29:d6:d0:a9:a1:fb:17:46:a1:9f:
75:62:92:39:43:7b:9a:a1:f4:a6:ec:8a:ea:2e:4d:
25:55:35:d5:a1:27:6e:8e:9e:8b:73:53:cf:25:1b:
33:00:db:3a:db:e6:f7:74:db:2f:ad:e6:a9:08:ad:
18:92:eb:5f:b1:f9:e1:ce:60:d9:21:ca:52:cc:f3:
e0:5b:90:de:ee:2e:6d:0d:61:3c:2c:90:f5:78:ab:
cd:ec:41:d3:88:12:a5:8b:54:8f:ff:7a:52:4c:8c:
37:3d:ab:b8:c7:a1:6d:ea:f3:b9:35:66:e3:11:da:
d1:a4:0d:b5:c5:af:1f:fb:84:bb:bb:df:62:ba:a6:
2d:94:cd:16:35:66:29:e9:be:5f:d4:b6:a0:c9:00:
d2:cd:c1:54:5d:a2:4b:dd:36:b8:8f:0b:e2:9e:54:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.241.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:6c:1f:f2:f8:74:bd:9b:19:58:43:e7:dc:59:9d:44:d6:89:
fb:eb:6c:0c:f2:34:70:83:f7:db:29:32:d2:b0:c5:0f:45:9f:
18:4b:9b:f5:67:e3:f0:8c:6e:7b:62:72:eb:bb:6c:43:37:7a:
1a:a4:f5:b3:c7:b1:99:5c:16:6d:06:0c:ef:92:0b:65:5a:68:
a7:7a:95:52:78:8b:2a:a4:88:04:c8:87:62:38:e3:aa:51:b7:
02:c5:92:2e:cc:21:19:16:82:81:89:25:b6:3b:df:81:20:10:
23:c9:11:e5:b2:4e:fb:05:dc:5d:22:56:66:d1:a8:9a:0d:b5:
f4:be:e6:6f:46:f5:82:bd:b9:18:39:8c:fd:11:a0:ef:ee:c5:
a6:b0:8f:24:cf:7a:f5:8c:bc:f5:b5:f3:42:ec:a0:cb:3a:82:
57:52:92:6b:79:cb:a8:05:98:53:f4:27:43:5b:3a:04:b9:88:
04:e6:7c:a4:f8:70:6a:ad:84:2f:6a:d6:3a:e1:b2:d3:31:0a:
ad:5a:6b:b4:b0:a1:7e:03:d5:eb:81:94:88:fc:e6:f3:03:45:
3e:42:60:73:f9:28:6a:ca:6a:4e:a8:c1:eb:90:69:31:fb:8f:
86:3a:91:0b:57:eb:6a:d7:14:ac:d4:ae:68:8d:12:cf:91:ce:
d6:18:7d:24
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICYTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUwMTIxMDgxOTU3WhcNMjUwOTMwMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE3RTAwRjExMC8GA1UEBRMoMDgzNTg3NDk3OEJBMzA5RUQ3REE0Njcz
RTc3MzlEOTMyMkYyNjI5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AK4fFUht9Y9HG8fFoxuFct2rg3TXvfv7hhODVFfL7+dguvQbeHZgGtBrr5CjRY1f
SLly56NE/NcfTa7fi6wwOOnpOylDmrG8xdHmhyRszE0kGu5XLuQ45iMyn4VCthwp
1tCpofsXRqGfdWKSOUN7mqH0puyK6i5NJVU11aEnbo6ei3NTzyUbMwDbOtvm93Tb
L63mqQitGJLrX7H54c5g2SHKUszz4FuQ3u4ubQ1hPCyQ9XirzexB04gSpYtUj/96
UkyMNz2ruMehberzuTVm4xHa0aQNtcWvH/uEu7vfYrqmLZTNFjVmKem+X9S2oMkA
0s3BVF2iS902uI8L4p5UQLUCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQINYdJeLow
ntfaRnPnc52TIvJimzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0UwMEYvN0QyQjFERjBEN0QwMTFFRjlFRkM5MTBEQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTdFMDBGLzdEMkIxREYwRDdEMDExRUY5RUZDOTEwREM0RjlBRTAyL0NEV0hTWGk2
TUo3WDJrWno1M09ka3lMeVlwcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKH48TANBgkqhkiG9w0BAQsFAAOCAQEALmwf8vh0vZsZWEPn3Fmd
RNaJ++tsDPI0cIP32yky0rDFD0WfGEub9Wfj8Ixue2Jy67tsQzd6GqT1s8exmVwW
bQYM75ILZVpop3qVUniLKqSIBMiHYjjjqlG3AsWSLswhGRaCgYkltjvfgSAQI8kR
5bJO+wXcXSJWZtGomg219L7mb0b1gr25GDmM/RGg7+7FprCPJM969Yy89bXzQuyg
yzqCV1KSa3nLqAWYU/QnQ1s6BLmIBOZ8pPhwaq2EL2rWOuGy0zEKrVprtLChfgPV
64GUiPzm8wNFPkJgc/koaspqTqjB65BpMfuPhjqRC1fratcUrNSuaI0Sz5HO1hh9
JA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:32:23 2025 by rpki-client