Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer
File: FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer (raw, json)
Hash identifier: 57SwlAJ7QufO7NaDT4lSsq8QY3HFVt7SBbDPYW8NH0c=
Subject key identifier: 14:E5:5E:C3:42:8E:3D:2B:A4:DC:71:C1:59:E5:F6:06:1F:16:3C:6D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 62AE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 04 Mar 2025 17:13:19 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 157.15.5.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25262 (0x62ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Mar 4 17:13:19 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A916E343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:50:2a:9e:7e:c5:b6:7e:8b:8a:22:db:c0:
6c:a5:57:ee:10:6b:ae:c8:9f:c7:c2:45:1e:29:77:
50:d6:48:64:7e:a3:02:2c:c0:bd:eb:f1:d7:a9:c1:
98:d4:38:68:52:58:01:18:bc:e0:e6:5c:2a:fc:75:
16:58:40:9f:c1:5e:15:b2:7a:f5:ca:1c:e8:62:6f:
11:91:60:ea:db:de:75:cd:23:38:82:42:da:2f:10:
31:e9:ca:2c:66:a7:07:e0:3e:7f:01:78:0f:6b:10:
37:92:8e:60:ec:77:a5:0e:26:94:52:9e:b8:9d:22:
e4:fb:6a:69:92:3f:bd:4e:8e:75:70:71:37:27:a3:
b7:5a:77:55:a0:b3:ab:c8:55:65:a8:7e:58:32:f0:
ba:45:c1:7d:48:49:31:75:b9:94:79:7c:22:d3:c3:
6f:fa:38:4a:c8:75:7d:f8:67:98:36:d6:e2:c5:20:
93:bc:ec:8d:03:0c:21:6b:36:16:12:e7:6f:77:36:
96:9a:02:1c:dc:3d:eb:8b:6c:5b:04:48:06:80:b0:
30:28:b9:89:55:d9:bc:ce:f7:7c:d3:b6:7a:ec:5e:
2b:5b:84:62:21:ac:7e:ba:5b:01:55:68:9f:3c:aa:
7d:0a:6a:c1:a4:74:30:51:d6:44:7f:c9:8b:05:f3:
22:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E5:5E:C3:42:8E:3D:2B:A4:DC:71:C1:59:E5:F6:06:1F:16:3C:6D
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.5.0/24
Signature Algorithm: sha256WithRSAEncryption
08:3d:17:0a:c1:23:f8:69:7f:23:ed:c5:9e:24:ad:5b:3d:b4:
cc:fe:38:6b:03:99:6c:1b:cd:82:2f:ba:a3:77:ba:0b:de:63:
f0:53:fe:11:3a:1b:38:93:8a:c8:6b:b1:cd:9b:b4:53:dd:f6:
c3:91:d9:fd:7a:01:79:a7:5b:36:0b:64:61:51:b6:a1:5d:08:
ee:ff:be:89:0d:cc:10:84:d4:80:00:d6:4d:c4:e5:c9:d3:18:
6b:70:f2:04:4a:be:2c:3e:19:ba:a9:bc:27:33:8d:95:34:64:
d7:80:08:5a:18:f3:3a:ef:6c:cf:9d:38:29:6e:c2:11:a4:02:
a2:f6:3e:16:d3:aa:b4:2e:d1:4e:1e:43:65:d1:7f:3f:ca:00:
c0:56:9d:ec:b5:08:b3:17:c9:e6:36:98:a1:84:95:b9:02:44:
9d:28:7c:b0:e1:6b:85:15:e4:c7:0e:b7:70:79:17:89:09:b2:
74:78:d6:23:31:f1:64:5b:e7:80:1a:eb:7c:a3:38:86:23:04:
08:dc:4c:7b:f5:08:26:50:92:27:ec:fd:23:d9:0f:79:82:7f:
b2:d9:02:d7:3e:aa:c4:98:7d:75:e3:d7:99:18:13:24:46:12:
f9:9d:81:32:93:99:73:da:30:29:58:09:2f:e5:35:fa:0d:8e:
b5:6d:9f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:33:12 2025 by rpki-client