Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
File: F9X-Mj6_2ajTROd7c3majnViQ1I.cer (raw, json)
Hash identifier: kbQ+L9NLH03TVejqMa959oR0NjZYi7uje/IY0wFSULs=
Subject key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 62A5
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 04 Mar 2025 02:19:42 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 166.120.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25253 (0x62a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 4 02:19:42 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91F2B47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:60:9e:99:1c:fa:8e:51:8e:34:1b:25:21:
3f:ad:e3:d7:73:8e:bb:b4:ec:31:57:ad:57:8f:6b:
6a:e2:d7:d6:f9:57:da:18:86:07:e5:54:2b:b8:ed:
04:d0:c0:b1:b7:d6:4d:a9:00:f2:a8:ed:74:25:04:
f2:89:60:97:2b:6e:8b:a8:20:1c:49:01:d8:bb:45:
20:89:61:f8:4b:78:ad:f7:a7:4d:8b:ba:28:12:75:
cd:82:26:e3:f7:8a:34:98:3b:97:9a:2e:39:3f:f6:
38:6a:45:e3:ec:03:9c:b0:86:86:9a:19:9e:4d:12:
f3:e9:e2:de:17:73:1f:52:e1:50:0d:b9:69:61:9d:
9d:37:a4:bb:e9:ca:0d:6e:64:9f:45:99:bc:8d:d7:
a1:e0:ee:80:c7:e4:e8:5f:14:3e:ab:60:0d:44:37:
c6:f1:10:f0:3e:8e:ed:9a:cf:c6:a8:5b:89:21:45:
7e:0b:e4:19:87:92:92:37:0a:d7:14:89:d2:ff:ae:
10:4b:94:b1:08:1f:f9:b6:9c:f9:e3:d9:6f:2a:36:
f9:e6:a8:d9:dd:f7:e4:39:0d:52:3b:88:9a:59:83:
69:35:12:a7:54:5c:a2:6b:3d:13:b9:29:3f:e2:ca:
b6:c9:3f:45:1c:a6:79:c3:a4:67:76:29:4f:ba:a5:
31:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
166.120.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c1:ec:09:97:59:9d:f5:da:48:6d:2f:08:3c:6f:71:08:5b:b1:
20:b3:29:f0:8c:64:b9:f8:e4:e9:ad:b7:7e:0a:4f:df:b9:d6:
4c:73:9f:60:a6:4f:cd:09:83:b5:8a:18:1e:40:17:1f:49:94:
7b:93:23:7d:f9:bc:5c:c3:9c:13:e9:d1:93:c1:20:0e:4a:f3:
07:9a:e9:56:76:5a:85:0b:2d:e0:b0:5d:2a:48:5e:6d:37:11:
92:f7:ea:44:fe:4b:cd:94:7d:41:6f:10:4f:1e:4c:c4:ca:ef:
52:a9:2d:50:66:01:9c:99:2d:ac:99:78:da:a1:c4:48:f7:d7:
b5:5b:c8:8f:7d:74:11:b6:0f:c1:e4:2f:61:be:bb:a0:b1:6c:
36:62:c0:1e:b0:0d:ba:a5:08:07:4e:2b:5b:24:4e:8c:46:95:
74:0d:b9:82:69:78:c1:40:1d:b3:c6:dc:4c:a0:96:e7:07:ad:
b7:20:99:2d:a9:83:e5:c8:b7:18:00:15:e0:8f:43:63:7a:ca:
fc:74:0c:27:5c:1c:e0:20:30:5e:74:aa:06:18:2b:4b:c6:30:
60:99:a3:66:57:48:3b:63:3b:56:5b:1c:78:7b:0a:7f:cb:fa:
db:9e:fd:21:cd:76:72:80:18:02:7f:92:cc:ba:9b:76:c5:0b:
30:76:54:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:44:02 2025 by rpki-client