Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer
File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer (raw, json)
Hash identifier: +J5fuUhTS+o8ZjZ5ORL+PMWKKFXvli8bEQzZODh90tI=
Subject key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6280
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 28 Feb 2025 20:17:20 +0000
Certificate not after: Fri 01 May 2026 00:00:00 +0000
Subordinate resources: IP: 157.15.106.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25216 (0x6280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 28 20:17:20 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=A91D0B40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:4c:de:97:74:16:81:7e:92:20:49:91:40:
3f:5f:88:9a:56:ce:7f:c4:ab:16:3c:71:1d:f9:59:
8c:00:4a:dd:46:e4:bb:34:06:76:27:5e:8c:39:d4:
a2:1b:7c:48:1a:7d:c5:e7:05:8d:bf:81:bf:e1:08:
43:28:dd:c4:f2:4e:cb:9b:39:7b:32:41:9a:6b:5c:
f8:80:ed:ba:a2:b8:16:f8:cb:da:5c:49:86:1f:8f:
d7:0c:8a:ad:96:89:b1:e7:bc:a9:5e:96:9b:64:db:
f6:2d:d5:fd:ef:2f:81:f9:1b:ce:e1:86:a3:fe:95:
74:07:28:f5:54:a0:20:e7:7e:60:7d:14:3d:4f:46:
6b:47:7c:a0:e9:a5:63:8b:1d:44:54:31:f8:c0:9e:
a0:37:f4:94:f2:9d:84:d9:cc:15:6d:e6:79:ec:32:
55:27:40:b4:50:08:f6:99:b7:ea:d3:53:4a:67:df:
5d:46:25:5b:65:4e:c7:21:ec:3c:6f:3f:35:64:d4:
31:dd:ea:d3:07:f3:16:e8:b1:ae:c3:48:69:f7:e1:
a3:6a:4c:93:86:81:ac:f0:32:2f:8b:78:33:49:b9:
6e:39:fd:3a:02:d6:c6:95:f7:2e:88:86:89:43:2d:
21:27:c1:67:06:19:2a:cf:60:e1:54:a9:08:96:09:
5d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.106.0/23
Signature Algorithm: sha256WithRSAEncryption
49:4d:d3:48:e5:fe:ce:c9:76:2c:47:87:31:75:6a:74:58:b3:
78:0b:cf:5c:97:6b:b8:61:2d:a6:a2:00:46:93:12:1b:77:7c:
46:4b:8d:a3:b2:1d:cc:60:92:43:fd:f8:5a:cf:db:b7:6b:42:
01:4d:d8:33:7c:bf:6f:9e:4a:13:19:e4:f6:74:9a:17:c2:4b:
d5:67:42:a9:76:bb:fc:e0:9c:c7:9b:94:b9:e9:c7:f2:be:dd:
96:de:54:1c:33:9d:db:3e:6a:d2:c3:00:9f:39:c5:f3:b6:f6:
ed:c1:7c:d6:b0:a0:61:6f:4f:bc:f0:43:93:6c:74:4e:59:7f:
1e:d8:b0:ce:94:fa:99:0b:6c:7c:9c:9d:a2:1e:92:cf:2d:2e:
8d:6b:d8:3a:b6:b2:87:51:da:f4:84:d5:fa:bb:51:a8:8f:61:
ef:5d:2c:a5:e8:1e:d7:be:28:c6:2b:f6:71:6d:22:89:2a:b9:
05:5e:0b:93:85:8a:66:52:62:7e:a5:ef:4b:a7:e9:23:ee:e1:
c2:ba:8b:eb:96:57:83:0b:d5:5e:86:b4:95:fe:f8:12:c3:44:
94:8c:f2:70:fd:24:cc:80:40:a0:33:4e:8f:fa:df:2a:34:63:
3b:14:17:a5:25:a2:62:74:6f:44:46:db:ce:7d:5e:e8:15:43:
44:a8:67:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:43:13 2025 by rpki-client