Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer
File: IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer (raw, json)
Hash identifier: 54bBIkWmm+5RBzd447/41soKCRWLiH6YzRU+ZUOTWWA=
Subject key identifier: 22:45:AD:91:54:3A:DD:AD:78:12:3D:D4:15:D6:59:BB:52:D5:FB:62
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5FA4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 20 Dec 2024 17:51:15 +0000
Certificate not after: Mon 02 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 96.9.160.0/20
IP: 132.147.64.0/18
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24484 (0x5fa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 20 17:51:15 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=A9195BA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0a:31:4e:b8:c7:f8:6b:b1:7b:e5:91:65:26:
98:cf:1e:49:80:aa:e5:9a:c0:f0:58:10:a3:96:db:
5a:70:f7:5b:cf:82:9a:06:af:ff:d7:0d:8e:48:b3:
cb:e4:85:67:2b:cb:55:b0:58:09:43:41:6b:02:82:
cb:13:29:df:c0:64:08:d2:bd:46:a8:b6:f6:5b:c4:
1b:eb:5f:77:42:15:be:72:85:d6:66:46:d6:af:b6:
25:29:d6:d7:49:c1:59:5c:d4:cc:35:bd:6d:1c:97:
86:ee:a5:2c:87:10:1b:b9:53:f6:cc:44:7f:9f:95:
bb:37:79:0c:9b:b7:00:86:f7:5c:0e:e2:0b:41:a3:
3d:a5:cf:c1:c5:f0:9d:1a:a5:a5:df:02:8f:7a:8f:
04:88:5d:e5:22:52:a2:46:a1:28:66:89:64:59:3f:
c1:11:37:c3:4a:2e:7c:46:f8:cb:ad:4d:3a:dc:20:
42:20:0d:43:43:6e:a2:15:5c:1e:2a:d2:f1:06:2a:
bb:93:ef:5d:9e:db:e6:a7:3d:c2:96:38:7b:37:91:
0e:8b:17:91:47:80:62:ff:e6:dc:eb:7e:69:98:9a:
d9:b1:58:6b:45:50:2d:ff:fc:61:79:23:d0:39:7d:
2a:d1:6c:54:8b:a4:48:20:10:f8:09:71:25:e8:b2:
95:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:45:AD:91:54:3A:DD:AD:78:12:3D:D4:15:D6:59:BB:52:D5:FB:62
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
96.9.160.0/20
132.147.64.0/18
Signature Algorithm: sha256WithRSAEncryption
38:ba:e5:54:b6:70:83:1f:3f:ab:0c:7b:6b:bc:27:a3:8c:38:
d0:60:d7:ef:24:0f:9e:a6:c4:d8:4b:a5:9c:a5:43:76:1a:d7:
29:d5:d2:22:b5:c0:be:3e:a8:7b:8b:bd:ba:54:8f:68:71:e8:
2a:cc:f2:31:ae:c6:73:d2:8a:1c:99:71:f8:0a:48:b1:29:d0:
db:ac:81:37:5e:52:fc:7f:a7:7d:34:6c:d4:06:f0:6a:ec:aa:
9d:23:05:68:a3:d6:d3:fd:27:58:7b:e8:ec:81:f5:6f:9a:fc:
cd:d1:f5:65:68:1c:6c:04:cd:81:29:d4:11:71:f2:0b:38:2c:
07:26:0b:26:04:ea:b3:98:e0:29:2c:b8:e4:45:29:40:03:7b:
58:3c:fe:e4:22:65:49:71:21:93:e5:50:1d:ac:73:47:b1:d3:
53:fe:15:a5:ab:15:65:bd:a6:8b:7f:69:e0:06:84:84:3b:61:
ef:dc:43:45:39:e9:8b:f9:01:de:21:a5:02:4e:62:c8:af:52:
bd:2c:a5:23:92:d7:03:77:8c:0a:bb:12:45:62:3a:ce:08:5b:
aa:7a:9f:b3:07:c9:df:87:c8:70:d6:92:25:03:30:3a:55:9f:
e0:94:7d:89:a6:b6:66:74:b9:7e:54:6f:ef:6b:2b:b0:fc:1b:
8c:1f:d2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:50:33 2025 by rpki-client